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") 14:12:39 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x48, 0x75, 0x0, {0x3d, "25f5b147b2eb183aec9e5692d6e8fd89601f9644adc64b35e4b26a8881cea3f71692d7f47262f49051c3d231afd1a75e8ca80c4cd63d18d79ae83e6b1a"}}, 0x48) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:39 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x44080) 14:12:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b00)={0x14}, 0x14}}, 0x0) 14:12:39 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000500)={0x9f, 0x75, 0x0, {0x94, "25f5b12db254a6d3857ac4b4f91265a781e7af607c00000005006e0a630e82f982e03a062a296352467f3395ad75b1ad1257d1e84657ddeba5efc62c9a9826e17d295c844d7211124be3ee8e52965a50f21d0329bee47c02faf01c567d5c393d825a4b1d012a0f446e1b0d5cfb10ab41cf5e7bc174dd9e67762ffd7cca71a8352265d9bfa9481b9522db9794fb4dac64cccc48c1"}}, 0x9f) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:39 executing program 0: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x121040e, &(0x7f0000000400)=ANY=[], 0xfe, 0x69c, &(0x7f0000000980)="$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") fcntl$setstatus(r0, 0x4, 0x0) 14:12:39 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:39 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) 14:12:39 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x70, 0x75, 0x0, {0x65, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7da2e53b47eb85867e370e17f497d040e7d71c16c37de553fe53e45dacb20563021138d522befde963256be8e59da8217957a7f9e"}}, 0x70) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$AUDIT_USER_TTY(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:39 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = dup2(r1, r1) r3 = dup3(r2, r0, 0x0) fdatasync(r3) 14:12:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x1) 14:12:39 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x4b, 0x75, 0x0, {0x40, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de59"}}, 0x4b) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:39 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5450, 0x0) 14:12:39 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) read(r4, 0x0, 0x2006) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000003a80)) r5 = dup(r4) rt_sigreturn() ioctl$TIOCGSOFTCAR(r5, 0x5419, 0x0) write$P9_RREAD(r1, &(0x7f0000000500)={0x146, 0x75, 0x0, {0x13b, "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"}}, 0x146) 14:12:39 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000680)) 14:12:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 14:12:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x4000) 14:12:39 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') lseek(r0, 0x0, 0x0) 14:12:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x75e3, &(0x7f0000000280)) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) rt_sigreturn() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r1) 14:12:39 executing program 2: r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='I', 0x1, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r0, 0x0) 14:12:39 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x149240, 0x0) dup3(r0, r1, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000080)) 14:12:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 14:12:39 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) write$P9_RSTATFS(r1, 0x0, 0x0) 14:12:39 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 14:12:39 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000680)={0x76, 0x75, 0x0, {0x6b, "25f5b12db254a6d385c8be89b812f5a77682aa0c989b1925f65d153d3277202637c096bdcdda178167e9aa79416ce4f4a952507bdb03faf1adbf90ddd9fd183ca3d5eae4656238177bb5b88d76d85ceb4836f8f91b2d4f8e4c9c88bfbbe9938cd64340aad427c25e3657ac"}}, 0x76) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x5451, 0x0) 14:12:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}}, 0x5) 14:12:39 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x94, 0x75, 0x0, {0x89, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d040000000000000000000000000070d4502d3dd15ffbd4d621068bfca19e922fb757988a7eb397c95b3bff648818ff8dc06d780fe410bcde08774e562519f9aafc66889eee22ab92360a5d14933a73756c12452bdb3e7738afaa42e15dd527c4ac380e21c0ca8dfa7749"}}, 0x94) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RLERROR(r1, 0x0, 0x15) 14:12:39 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) rt_sigreturn() r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "679f672c00b69e65b0934066fc7c3406caf2c09e33bd50116312e2b00fee650af69b2150ccaa762a3db7ad752fe616e085e991c0436e7e7111238865d27b4e82dcc94700ddd1878b088736009d15f1fa"}, 0xd8) sendto$inet(r4, 0x0, 0x0, 0x24000040, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000040)={0x18, 0x7, 0x0, {0xf, '%,&g$)\x9b.\'^,\xd1].['}}, 0x18) 14:12:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) 14:12:39 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x0) close(r0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) 14:12:39 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x9e, 0x75, 0x0, {0x93, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63986e851b0cb4be35de2edfe3b50591fcb4fab33eb62a9cd3e323f00375"}}, 0x9e) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:39 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x97, 0x75, 0x0, {0x8c, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63986e851b0cb4be35de2edfe3b50591fcb4fab33eb62a"}}, 0x97) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:39 executing program 1: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0x5421, &(0x7f0000000100)) 14:12:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={0x0}}, 0x8005) 14:12:40 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0x5450, 0x0) 14:12:40 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/spi_transport', 0x0, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) 14:12:40 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000001f00)={0x1f}) write$P9_RATTACH(r0, 0x0, 0x0) 14:12:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14}, 0x14}}, 0x44) 14:12:40 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) 14:12:40 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000800)={0x5e, 0x7d, 0x0, {{0x0, 0xde, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x4f, '!\xe0\x9e\x06\xbbejC\x1d\x1c~z^\a\x1d\xf8\xb3\xb4\xb4\xe67@fm\xba;\xf1\xd8,\xe9\x89U\xe5PD\x9e%\xaf\xc3Vpee\xe2\"\xdd\xbc\xe3\x03;`\x9e\x1f\xa0\xd7XU\xfd\xd54\x00\x00\x00\x00\xbf\xf0\x97\x83\xaca\x8b\xaa\xaf\xd8$\xc3\x00;\x86', 0x9, 'trans=fd,\b\xde\x1d]=\xec\xd0[w\xb7\xb8.\xd6\xe5l\xf7\t{\x97\xbe\vK\x05`\x05\x8eL\xaa\x96\x8f\x92\xdf\x120n\xaf|Wr\xbf\xec\xdf{\xf8t\xc5\x1a\x8f\xbf\xf3\xc6\xec\xf0\x89A\x91\x1a\x9a\xad\x82\xf0\x98\x8b\xc0\xe5\xdc\xc9A\xd0\x8c\xee\xee\xf8>5\xf0\x82X\xfb\xe0\xec\x99\x04~\xbd\xa07\x92=\x81W\'\xd2\xdc\xd25X', 0x53, 'F\xaf\x97\x97%\x94\x96\x02\x04\xfa#m\x12Y{\xae]H\xc3\xfe\a\xf4\xeb\xf5\x90\xbf\xf1W\f\xe4\x019A7\xb6\x00\xe2\xe8c\xcd\x83}a[\x7f\xb3\xe1\x9aj\x93EH\xfc\x84\xa4_\x83\xf5\xb7\x01\x00\x00\x00\xf3rE\xb4\x99\xe4\x9b\xbd\x87\x12\xe2a\x10\xb6O!\xb8$\x00E', 0xfffffffffffffdf7, '\xfc!*F\'zYr\xe3b\x8d\x95U\xdf\a\xc8\xedF\x15Sg\xabE\xa5$\xd4`@h\x01^\xa9\x941\x01\x00=\x067\xd7\x8br\xa9\xadh|\x15\xb2.\xf4\x1b\xf5\xf3\x13\xcaz\x84\r\xc1\x88\xbc\x05\xf0F\x01\x8c\xc8\x8f\x10\xa0a\x19<\xa1\xf2\x97\xc1\xbe\xe8\xfb\x85\xdf3f@\xd9\xc0Te\xd8\xe6\xfc\xd0}\xdd\xa5J\x01|x\x87m\xe6\x95\xf1\xe5\xbbJV\x98\xf3\x9e\x91\x85\xdb\x900\xf6\x97\x88\xaa\x9a\xb7A\xa0\xccF\raf\xa8V\xb0\x86n(vq\xbf\b\x02\x02\x9b*z\xdcd\x16\xcf\x94\x19\f\x8c\x02\xe6\\\xae\x9ao\a\xd8\x81\x1br,Rx\x0f\xc3\x05\xeb\xa9\xdd\xc5\x18\xfc%\xabD\xaf\xcc\x9e,\xa71\x9b\xff\xf8Y!\xb1\xef\x94\x04CT\x03c\xef\x9a6yO;J\xdc\xbf;S\xb3E\xe4\xe8\x97\xf8P\xda\xfd\x81\x80[s\x9b\x00'/238}, 0x5, 'rfdno'}}, 0xf8) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:40 executing program 1: r0 = add_key(&(0x7f0000001380)='keyring\x00', &(0x7f00000013c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000001700), &(0x7f0000001740)={'syz', 0x1}, &(0x7f0000001780)="80", 0x1, r0) 14:12:40 executing program 0: r0 = io_uring_setup(0x75e3, &(0x7f0000000300)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={0x0}}, 0x0) close(r0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) 14:12:40 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000300)={0x43, 0x7, 0x0, {0xfffffffffffffe87, '/&\xa7\xe8\x84\xfcY\xcf\x101@/\x00\x00\xc0(\x01\x00\x00\x00I\xaa\xe9\x00\x1f`\xe2\f\xb2\xd4M\xed\x82\\~jh\xc8)\xd34\xb8\x9a)4(\x12\xb7\rhMP\x8f\x86\x80\x89\xbe\xfe'}}, 0x43) 14:12:40 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000680)={0x24, 0x75, 0x0, {0x19, "25f5b12db254a6d385c8be89b812f5a77682aa0c989b1925f6"}}, 0x24) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 14:12:40 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x2c, 0x75, 0x0, {0x21, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1"}}, 0x2c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x2e, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:40 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x7c, 0x75, 0x0, {0x71, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f497d049fb75f016bcaa6043859189a0484f83b61835272c6c0b9067c033b29f5865f1edae5de79b512bcf8d2a9f127f327e11552"}}, 0x7c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000340), 0xffffff46) dup3(r4, r3, 0x0) rt_sigreturn() writev(r3, &(0x7f0000000340)=[{&(0x7f00000002c0)="c4", 0x1}], 0x1) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:40 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000600)={0xd0, 0x75, 0x0, {0xc5, "25f5b12db25486d385c8be89b812781f6260482e30dd7a6fd989c000d68be6cb32c8cc59488b87be15b8f1b5ca796024530400000000000000527afeed25f3881965724c08d3fc37e048a41f46f1b025548932d59f2129f4feab88dafd6424fe315d89229119385a9f2450689661b3a47f1f5a8bbbf82871df012af5aeb5a0d383db679c330230fb81a7613c8864097b5a7841c4d145096e3142d2016d75e4e79da1c160d99575f050beedbb7bc4b4e3397a44818ac6309b08dd992860d02726f54f02e7c4"}}, 0xd0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:40 executing program 4: r0 = memfd_create(&(0x7f00000002c0)='-B\xd5NI\xc5j\x9appp\xf0\x00\v\x18t4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xde\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n\xfe\xe3F=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\x00\x00\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cS\xae\x12G\xd8\xa4yX[z\x10\xc9\xa5c', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = eventfd(0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5421, 0x0) 14:12:40 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) write$sndseq(r2, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}], 0x1c) 14:12:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 14:12:40 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000580)={0xda, 0x75, 0x0, {0xcf, "250500000089b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c1200000000080076f2bff3f53499d260ff99ba8ff3e93fb0453138b8bf174d5a93e2b010294f285d9546fc73a89653ade902e23b6f24694607edd2078f9c8a610e67b755538f7c495c8f9449e9fb4953d747b185f28389f6ced0f1af71873f9fb1f20a9a34efe18b06f48b3235948deaac08d3445fcf7d0482cc9b579aa723da8f39d5ab322217b315aa6773d47bc1bdcae1326aed284387ef0ba0a0d2ce5159bce96fe609f934ee386395549244"}}, 0xda) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x20000000) 14:12:40 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xe6, 0x75, 0x0, {0xdb, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000010e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb919b9841eea7de595f45275543ffcc1b4b48320e9e89de166dacee2ef3f3132e2f808eb1468156d2d4c728ca98cb361d417b41bbec766f1be5b9e893f49198af1b1cdc62f0290a4d5cfa6d5b8842613ffb2750c7f8056cb9b594a3a0984894505f93686c6f8893300bccd8d28b213257a328799916ab11cf6df73140f82b79d946bee61a6b5f6afeeb293446cd1c102374108c2947cbcdcb0700"/219}}, 0xe6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7}, 0x7) 14:12:40 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:40 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000a80)={0x641, 0x7d, 0x0, {{0x0, 0x4d7, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x158, '\x00b\xff\xcb\xae\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x02\x01X!\x04\xe1[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0[\xd2;S*\xfc\xb1\x00\x00\x00\x00\x00\x00\x00\x00\xcf\x13\x11\xd1\b\x90>\xa3\xf6\xb4\x1b\xaf\x9e\xdbM\x17@\x8e\xb9\xb2J\xec\xb1\x99\x95m\r\xe8\xb5\xf2{\'\x11+gUf\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xfem\x1d0aU=\x1eE\xe9w\x1f\xc8j<^\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xd6\xf1\xb3\xe3\xffc\xd5\xb4\xe6K\xcc~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee;/\xf6\x9f\xcb\x8ac#\xa2\xf7\xe6\x19\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80-\xe3:\xe0$p\xb0\xf5\xaa\x98\xbf\x03\n\x1a\x82J\xf6Z\xa6\xc3\xc6\x144\f\xc2\xfdR\x87cp\xe0\x15\xfc-\xef\x82\xa0\xb7\x1d\td\x1d\xe9\x9c\xe1\xadU\x1c\xbc\xe1L\xee\x8b,\xfcm\x8c\x81\xa7\x17W\x04\xd2\x89W\'*\x10(\x1bS\x11\x80\x1e+Dw\xed\xe0\xd7a\x9dz(U3\x9b\xcf\xde\x03\xe6 b\xd8\xab-\xf93\xbb\x84Fo\xb8W\xea\xd9\x0e\x01\x95', 0x10d, '-\x00\x00\x00\x00\xc3\x00\x00\x00\x00\x00\x00\x00}\xa0\xf429\x9fH\xb6\xae\x9fC\xe3m\\d\x8b\xd4\xa4\xac\x89\xea\xa2?f\v\xa2\xc6\xe0{\xee\x00x\xb8\xfb\x12O\xb8\x88\x94\xcbO[.\xdfiO\xfa\b\xf8$3pV\xb0\xec\xf0\xb7I\xf9\xc5{P\x16x\xf4H-*\x15\xa82\xab8\xf37\x04\xe9\xe8\x84\x125\x1dq\x81b0#~,$\x7f\xb9<\xa3\xfd\xd7\xd7\xd6\x0f\r\xef\xec\x1bz\x12W\xb8\xfc\x1f\xa9\xca\x87\xfd\x1d\xd5\xb0\xd9\xe9\x83\x8el\xaf\xa7A\x7f\xc5\xdb\xc6\x02\x1cR\xb6\xeb\xcf>I\x9e\x9b\xf1\xc3\xa3\xf6}D\xd2\xa9\xe8\x8a\x9eNC\xa6!\x81^\xd6\x05\xfa\x02\x82mw>\xd1\x83\xffw\x9bw=\x88\x069\xa1\xd1\xeevt\xb5\xab=\xdcX\x1c\x1f\xe0\x1c\n\f\xad+\xdeCp\xb5\xa8\b0|\xa6\xc7HN\'\x88\xcd\xdf\x83\xa4\xd5\x7f\xf6\r\xc5\x10\x94!\x1c\xfb\xcc]SvwV\xc6\xe0i\x8c\xb2\x9d\xd5\x11\xa2vy\xb6+1tq\xed\x18\x89\xf6$\x85\xb7\xf3)roA\xf4f\x1d', 0x23d, '2\x0f0QM\xce\x92\x03V\xf2\xb2:hk\xa1\xee\xad\xa2\xb2A\x01\xd1\r\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xceT\x1a`\xf0\x10i\x11\xe2\xa1\xceq\xbc\xba\x1b\xce\xf3\x8aK9\xea\\\xd4\x03\x13\x17\xbf\xd3\xec\xa8\xa1\x1e+\xcb\x84\xffn\xd3\xa27\xc8u\xce\xdf\xfd\xb1\xcc/\x00\x0e\xb8\bp\xe9\x88J\xb6{\x85k\x8a\xc1\xfd\x15\xd1j\xca0\x8e\xffgp>\x95\xeb\x19t\x8b%6\xe3\xb6\xe3T\"\x1e\f-u\xda\xa4\x9a\xb5\xa6\xc4\x8fZ\x17x>\x9f\x8c5m\x99\xb2)z sL\xd0p\xbe\xe6\x04e\x9b\x7fF!\xd0\x87\x19,\xa0\xc4\xcb\xafZ+s\xd9_s\x00\xbe\x92\xe9\xe8\xdf,_\xec\x10S.\x18\xe4\xa1Z\xa9\f`\xaa\xado\x1a\xa9z\b4S\x92S\xdd\xcd,\xc48=\x01\xe9*\xa0\x00\x92\xef\xcfB\xee\xe8\xb98\xf7M\x97e\xe4zC8\x10\b\xbe\xf1\x80B_\x80o3\x9eg\x9ea\xc9\xf5\xe7\xbcT\x88\xc5)\r\x7f\xb7\xf0*\xf0\xbb\xf5.C\xe4\x0fr\xa3\x81\xae~\xcf\xa37\xb5*h\xc8\x15\x10UE\x15\xb9\x88:\'\xb0v\xeeE\xcd\v\x9a\xac\x1c\x90c\x06\xeeGS\xd7\x97\xc7\xa8\xb6\xb1\x9c\xd7\x11/\xcd\xfd;\xcfm\xbb\x94>\xe5\x8d\xfe&\xfd\xbc\xe8\x06\xf1\ntLc%\xee\x85\xb0\x87\x05Z\x9e{\x16\xbbc\xd0\xaa\x9d\x12\xf1\xac\t\xb2\xc5\xe0\bF\x8a\xd3\'\x9b^!\x043V\"\xa5W\"\xe9\x06F\xd23\x1f\xf3\x81\x84\xa4\xbc:t|\xf5V\x82\x96D\xaf0\xbe\x9d\xff\xca\x14\x14\x03u\xc9\xfc\x9a\a\xb4\x0e\xa8uE\xbc\x9c<\x0f\xc6\xf54@\xbc\xbej\x83\xfc\xd1\xef\xf3\x94\x95j\xb9\xd1\xb5\xadF\xe7\x8cR`,\xab\x8e\x04\xfb\xe1tq\x06\'\x11\x13\xfc\xa5\xdf\x1f\xb6\x8d\xaf\x92\xd9\xe9\xb4eW5u\xb6aD&8\x9c\xdf\xce\x8e\xfc\xea\xee\x99W|\xae/=\x06\x88\xa5\r\'-+\x01\x89k\x12G\xfc\x83TT\xe2\xd4\x13rdW\xc3[\xc3\x9ehx\xe21(\xae\xe4\xc2?\fa|z\xac8W\xa8Nf:\ak\x01o\xc5\xafqymk\xf9w\x11r\xf3\xb3\x8e\xc2\xa2Sa\x9e\xc6\ai\xb7i\xccf\xff\xc8\n\xbd\x0f\x18\xac\xfe\x85d\xbdu\xa0S\x9eU\xe1', 0x2, 'd\x05'}, 0x155, '\xea\x17\xaag\xa0\xe9@\xbd\n\xfd\x01}\xff\x16H\x99;/vo\'\x86\v\xaf\x16\xdb\xba\xee$z\x85K\x17\f\xeb\x8aH\xd2\xea\xa0\r\x00\x00\x00\x00\x00\x001\x05x\xf7\xea\xfbw\xcaw\aL\x88v\xcb}\xa0\x90\xe7f\x9c\t \"\t\xbeN\x94\x12\xe8\x9f\xf8b\xba&r\x12y=\x7f\x80D`D\xdb\vS\x94\xddt\xff\xf6\x02l\xa4\xb2K?\b\x1b\x91\xb4\x98\xf0\xc3\x1a\xcdmKn\xdai\x84\x9a\x9b\x19#F\xeb=8\xe2\x86Y\xa7e\xb1\r\x9baCm\xd8/\xd5\xceV\x19\x19\xdf{\f#dj\x90\x92\x81\x91`0\x02x\x82\x96U\x9cH7Y\x9fI\x03\x9b\xa0ay\xbd\x18)\x9dD\xded\xcc\x0f\xa6\x93\xf5\xca\x1e\xcc\b\x1al\x03\xdeB\x92a\f\x8f\xae2d.\xaaR.\xb2\xfa>)\x06\xf4\xa3\xd8\xe2J\f\xc8\x1a\xa88^t\xba\xa7\xa1\x03\x8fR\x83D\x97VP\xdd\x17\x81\xa6\xf58\x02\xdf\xb0#\xe5\x1a\xaa\xb8\xf9 \x93O\x15b\xa0Z5A\xea\xd0\xf2\xfe\xac\x147\xab\xe9E\xd9\x16\xa0\\\xbb}8\x83J\x9e\x04\xfb\x1f\xf4^<\xcb1\x8b\f\xbe\xf7czn\xb9o\x02\xa9\x03\xc1\xc9p1\xf7\x14\xa8?\xf5*\x88g\xd9$\xc2\x17\x89\xf3\xb5\xe1\x8c\xc5-\x11\xc27\"\x86s\xd87hKG\xbaQ\xb5\xfe\x9c\xd1\x0e\xdd\x97\xa8', 0xee00}}, 0x641) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:40 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x1a, 0x7, 0x0, {0x11, '/\x98\xc7\xd7\xfc\x14&;7S\x00\x00\x00\x00\x00\x00\x00'}}, 0x1a) 14:12:40 executing program 2: r0 = io_uring_setup(0x32f7, &(0x7f0000000000)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0xffffffffffffffff, 0x0) 14:12:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:12:40 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x97, 0x75, 0x0, {0x8c, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309ec290ef7d1c0f6d03c178e7dd934cf77312873cf98c3825b097b45c0122ca4c141103a77f236df342306dd258be938f39409eaf669b34f95ef646e9ed3a81de101b7c14468cf871c019c864f205a3bf5ed7091d7d162944bb4c948ce4007e0e7"}}, 0x97) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:40 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x88, 0x75, 0x0, {0x7d, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63986e851b0cb4be"}}, 0x88) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup2(r0, r0) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14}, 0x14) 14:12:40 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0x26, 0x75, 0x0, {0x1b, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e"}}, 0x26) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x33fe0}}, 0x0) sendmmsg$inet(r3, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:40 executing program 4: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x0, 0x0) 14:12:40 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x2a}) unlink(&(0x7f0000000140)='./file0\x00') 14:12:40 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 14:12:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14:12:40 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00') close_range(r0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 14:12:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, 0x0) 14:12:40 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x32, r0, 0x0) 14:12:40 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x7c, 0x75, 0x0, {0x71, "25f5b12dc45605000000be89fb42c7882f060000000000000072c1a7554b887b0e472b7c32586c4358e4da32457da9f1c1cd82e403c9c7b69cc082d973147e99ce650eb8ab36486a190cd81e6e6c85ceda1cacb3086d99aaedf35de84d69efc715d2f553fdd09b9b1df847dd4fbd590fc9"}}, 0x7c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 14:12:40 executing program 1: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001b80)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000001bc0)) 14:12:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000540)='./file0\x00', 0x21000f, &(0x7f0000000240), 0x1, 0x50b, &(0x7f0000004fc0)="$eJzs3U9vHGcZAPBnxt7iNC52BIdSqaWiRU4F2bVr2loc2iIhbpVA5R4se21ZXnst77qNrQo54gMgIQSROHHigsQHQEL5CChSJLgjiEAIEjhwCAya2XFir3ZjB/ZPav9+0ut5Z3Znnufdzc7OO+9kJ4AL69WIeD8iJiLijYiYKZenZYnDTsmf9+D+Jyt5SSLLPvxbEkm5LIpaRKVc93K52lRn0lNr/2BzudGo75bztfbWTq21f3BtY2t5vb5e315cXHh76Z2lt5bmB9LOvF3vfvPeT374i2+9+5uvfvyH63+5+v086+ny8U47Bu/olZk6tmwyInaHEWwMJsr2VMadCAAAZzJRHud/qTj+n4mJ4miu4JAOAAAAzonsvel4mERkAAAAwLn1XnENbJJWy+sApiNNq9XONbyfj+fTRrPV/spac297tXOt7GxU0rWNRn2+vKZ2NipJPr9Q1B/Pv9k1vxgRVyLixzOXivnqSrOxOu6THwAAAHBBXO7q//9zptP/LzzMxpwdAAAAMDCz404AAAAAGLp+/f9kxHkAAAAAw2P8HwAAAM61b3/wQV6yo/tfr360v7fZ/Ojaar21Wd3aW6muNHd3quvN5nrxm31bp22v0WzufC22927U2vVWu9baP7i+1dzbbl/fOHELbKccAAAAYISufPH275OIOPz6paLknsv/TPRZQccdzo30aZ78p+HlAYxev6/5U90bbB7A6E2OOwFgfA7HnQAwbid+6qPHQcHxi3dOnDP47fByAgAABmvuC73H//MuQGXcyQFD9VTj/8C58j+P/wOfek85/n9nWHkAo1dxBAAX3mm3+pjq98CZx/+z7NRtAQAAQzVdlCStlmOB05Gm1WrEC8V/9a8kaxuN+nxEfDYifjdT+Uw+v1Csmbg9IAAAAAAAAAAAAAAAAAAAAAAAAACcUZYlkQEAAADnWkT656S8/9fczOvT3ecHnkv+NVNMI+Ljn3340xvL7fbuQr7874+Wt2+Vy98cxxkMAAAAoNtRP/2oHw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg/Tg/icrR2WUcf/6jYiY7RV/MqaK6VRUIuL5fyQxeWy9JCImBhD/8GZEvNgrfpKnFbNlFt3x04i4NJr4L2dZ1jP+5QHEh4vsdr7/eb/X5y+NV4tp78//ZFn+X/33f+mj/d9En/3fC2eM8dLdX9X6xr8Z8dJk7/3PlTJ+0if+a7022ONF+d53Dw76xc9+HjHX8/snORGr1t7aqbX2D65tbC2v19fr24uLC28vvbP01tJ8bW2jUS//9ozxo5d//Z+uRf/OOor2R5/4s6e0//W8UjnemO4wZbC7N+5/rlOtdG2iiH/1td7v/4tPiJ//m/hy+T2QPz53VD/s1I975Zd3XumZWBl/tU/7p05p/9V+G+3yxnd+8MczPhUAGIHW/sHmcqNR3x165VaWZaOKdSErafmWPiv5dFemno00VE6vDOLMFgAA8Kx5fNA/7kwAAAAAAAAAAAAAAAAAAADg4mrtRzrsnxPrjnk4nqYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADzRfwMAAP//x4Dh1Q==") chroot(&(0x7f0000000440)='.\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:12:40 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x6b, 0x75, 0x0, {0x60, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c310"}}, 0x6b) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x90) 14:12:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) gettid() timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000400)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) 14:12:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000021c0)={0x0}}, 0x0) 14:12:40 executing program 3: syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDFONTOP_SET(r1, 0x4b72, 0x0) 14:12:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @empty}, 0x10) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f00000000c0), &(0x7f00000002c0)=0x4) 14:12:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) 14:12:40 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.log\x00', 0x80041, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r1}, './file0/file1\x00'}) 14:12:40 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x52, 0x75, 0x0, {0x47, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280f9c8"}}, 0x52) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa0002) r1 = dup2(r0, r0) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 14:12:40 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 14:12:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x24}, 0xffffffffffffff7f}}, 0x0) 14:12:40 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$sock(r0, &(0x7f0000000500)={&(0x7f0000000200)=@nl=@unspec, 0x80, 0x0}, 0x0) 14:12:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:12:40 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000200)=@gcm_128={{}, "d2a541049b417c0e", "5fd7caecc7566ba929843cbecfe2cc19", "a32d724a", "60323bb75ffc37a5"}, 0x28) 14:12:40 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) readv(r0, 0x0, 0x0) 14:12:40 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x8b, 0x75, 0x0, {0x80, "54a6d385fbc6b82e1657176e17f7e200be89fe949fdcc8ae6e389a93f1e2d9078a32107df90748ba4b0af5aaa6b3e5da7379ebbf73bcb75bac9148e52d20f786c49019725689cf515372fe843afd070000000000000002b5777fd8ebc885851028bfe2d28b17a0c7b286d51c6a64e43176894c3d217755577da5ac2a9e0d4e67"}}, 0x8b) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = eventfd(0x0) read$eventfd(r3, &(0x7f00000000c0), 0x8) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:40 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003c00), 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x5451, 0x0) 14:12:41 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3000, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') 14:12:41 executing program 2: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0x5450, 0x0) r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x701002, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) pread64(r1, &(0x7f0000000340)=""/4096, 0x1000, 0x0) 14:12:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000540), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup(r0) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) 14:12:41 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x2a}) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) 14:12:41 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x5e, 0x75, 0x0, {0x53, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7da2e53b47eb85867e370e17f497d040e7d71c16c37de553fe53e45dacb2056302113"}}, 0x5e) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r4 = syz_open_pts(r3, 0x0) read(r4, 0x0, 0x2006) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f00000025c0)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x2004) 14:12:41 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"], 0x4f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RLERROR(r1, 0x0, 0x15) 14:12:41 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000006380)={0x0, 0x0, 0x0}, 0x0) 14:12:41 executing program 1: r0 = memfd_secret(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 14:12:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x60}}, 0x40070) 14:12:41 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x185043, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 14:12:41 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) close(r0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200), 0x8) 14:12:41 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000040), 0x10) 14:12:41 executing program 2: pipe2$9p(&(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) memfd_secret(0x0) memfd_secret(0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x0) socket$nl_audit(0x10, 0x3, 0x9) creat(&(0x7f00000003c0)='./file0\x00', 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x34e) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) dup(r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 14:12:41 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xd8, 0x75, 0x0, {0xcd, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63986e851b0cb4be35de2edfe3b50591fcb4fab33eb62a9cd3e323f0037587fa02aeaabc0adcf60b3aabafc5faa766166c227cadd6b1a8cbc5cd9cf33d007ccac5f5c26a09d8c73331234f609fd40ec5242202d276fc22e3"}}, 0xd8) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:41 executing program 0: r0 = epoll_create(0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x33fe0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) rt_sigreturn() r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f00000014c0)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 14:12:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 14:12:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x40) 14:12:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000500)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90) 14:12:41 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/power', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 14:12:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) dup2(r0, r1) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) 14:12:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x20000010) 14:12:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 14:12:41 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) recvmmsg(r0, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 14:12:41 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x19, 0x75, 0x0, {0xe, "25f5b12dc45605000000be89fb42"}}, 0x19) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 14:12:41 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0x5451, 0x0) 14:12:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) 14:12:41 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigreturn() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) 14:12:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x104c, &(0x7f0000001440)) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f0000000740), 0x1, 0x4dd, &(0x7f0000000240)="$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") sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) close(r1) 14:12:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x55bf, &(0x7f00000001c0)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100)={0x77359400}, 0x10) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) close(r1) 14:12:41 executing program 3: r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0) 14:12:41 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x37, 0x75, 0x0, {0x2c, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309"}}, 0x37) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:41 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0x15, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000600)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) 14:12:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) recvmmsg$unix(r1, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003280)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}], 0x1, 0x0, 0x0) sched_getattr(r3, &(0x7f0000000080)={0x38}, 0x3c, 0x0) 14:12:41 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000500)={0xca, 0x75, 0x0, {0xbf, "25f5b12db254a6d3857ac4b4f91265a781e7af607c00000005006e0a630e82f982e03a062a296352467f3395ad75b1ad1257d1e84657ddeba5efc62c9a9826e17d295c844d7211124be3ee8e52965a50f21d0329bee47c02faf01c567d5c393d825a4b1d012a0f446e1b0d5cfb10ab41cf5e7bc174dd9e67762ffd7cca71a8352265d9bfa9481b9522db9794fb4dac64cccc48c178459cb95900fae18af6d6769dcf8427937800000000000000000000dfc61390c6ec35e7429fda293f6ac6"}}, 0xca) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:41 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x41, 0x75, 0x0, {0x36, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b187"}}, 0x41) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:41 executing program 4: r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 14:12:41 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x4c, 0x75, 0x0, {0x41, "25f5b12dc45605000000be89fb42c7882f892ef38ad44019ca72c1a7554b887b0e472b7c32586c4358e4da32696976c7d8b61b2503c9c7b69cc082d973147e99ce"}}, 0x4c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000003b40)={0x14}, 0x14}}, 0x20000000) 14:12:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) sendto$inet_nvme_pdu(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:12:41 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x94, 0x75, 0x0, {0x89, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280ecc846b7d1f7fabf9614b34419c2394cac12c3f8cf087045607edf5b5b1d81827247e7ec48d36e808d155fa8568c0de7bc129ed91c21ef6ab6ba061e10bf89b63718ce76"}}, 0x94) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:41 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xac, 0x75, 0x0, {0xa1, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63986e851b0cb4be35de2edfe3b50591fcb4fab33eb62a9cd3e323f0037587fa02aeaabc0adcf60b3aabafc5"}}, 0xac) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) write$tcp_congestion(r3, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:41 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f00000000c0), 0x1, 0x4dd, &(0x7f0000000240)="$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") fcntl$addseals(r0, 0x406, 0x0) 14:12:41 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x5450, 0x0) 14:12:41 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x26, 0x75, 0x0, {0x1b, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070"}}, 0x26) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:41 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/virtio_scsi', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000040)) 14:12:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) 14:12:41 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) getsockopt$inet6_udp_int(r1, 0x11, 0x65, 0x0, &(0x7f0000000040)) 14:12:41 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x3c, 0x75, 0x0, {0x31, "25f5b12db254a6227ff0e55d8c2ea55180e463e354b0c498fb7e0e8fc1ba3afd9e4d7ee912ce4bac54e2dbfe2ac2b755af"}}, 0x3c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x2e, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) write$P9_RWRITE(r3, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:41 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:12:41 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 14:12:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) 14:12:41 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATu(r1, &(0x7f0000001680)=ANY=[@ANYBLOB="f0"], 0x8f0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:41 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002140)='[', 0x1}], 0x1}, 0x4000010) 14:12:42 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 14:12:42 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x33, 0x75, 0x0, {0x28, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c12"}}, 0x33) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) close(r0) rt_sigreturn() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x10, r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000010c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0x0) r3 = syz_pidfd_open(r1, 0x0) waitid$P_PIDFD(0x3, r3, 0x0, 0x4, 0x0) 14:12:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = io_uring_setup(0x3a8b, &(0x7f0000000300)) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000010701"], 0x14}}, 0x0) close(r1) rt_sigreturn() rt_sigtimedwait(&(0x7f0000000000), 0x0, 0x0, 0x8) 14:12:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 14:12:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x100000001, 0x0) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xa041, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 14:12:42 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r0, r1) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, 0x0) 14:12:42 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "0613b72a5580960b", "9bac8ce48dc3a2a680228d7470ea7a2a", "33f6c840", "0986d3409e720cd0"}, 0x28) 14:12:42 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000500)={0xa4, 0x75, 0x0, {0x99, "25f5b12db254a6d3857ac4b4f91265a781e7af607c00000005006e0a630e82f982e03a062a296352467f3395ad75b1ad1257d1e84657ddeba5efc62c9a9826e17d295c844d7211124be3ee8e52965a50f21d0329bee47c02faf01c567d5c393d825a4b1d012a0f446e1b0d5cfb10ab41cf5e7bc174dd9e67762ffd7cca71a8352265d9bfa9481b9522db9794fb4dac64cccc48c178459cb959"}}, 0xa4) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:12:42 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x2d, 0x75, 0x0, {0x22, "25f5b12db254a6227ff0e55d8c2ea55180e463e354b0c498fb7e0e8fc1ba3afd9e4d"}}, 0x2d) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x2e, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) write$P9_RWRITE(r3, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1, 0x2, 0x3}, 0x14}}, 0x0) recvmsg$unix(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) dup2(r0, r1) getsockname(r1, 0x0, &(0x7f0000000280)) 14:12:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4fcc5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) 14:12:42 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) write$P9_RGETATTR(r0, &(0x7f0000000080)={0xa0, 0x19, 0x0, {0x0, {0x80}}}, 0xa0) 14:12:42 executing program 3: setrlimit(0x7, &(0x7f0000000000)) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 14:12:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, 0x0) 14:12:42 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000200)=""/209, 0xd1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigreturn() ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x335}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors_recursive\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:12:42 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0x3a, 0x75, 0x0, {0x2f, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6"}}, 0x3a) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() exit(0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 14:12:42 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0x29, 0x75, 0x0, {0x1e, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e"}}, 0x29) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x2e, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0xe0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:42 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r1, &(0x7f00000002c0)={0xb}, 0xb) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x40}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:42 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x3f, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000080)) 14:12:42 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:12:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000c00)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 14:12:42 executing program 4: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)={0xa6e40}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 14:12:42 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000680)={0x65, 0x75, 0x0, {0x5a, "25f5b12db254a6d385c8be89b812f5a77682aa0c989b1925f65d153d3277202637c096bdcdda178167e9aa79416ce4f4a952507bdb03faf1adbf90ddd9fd183ca3d5eae4656238177bb5b88d76d85ceb4836f8f91b2d4f8e4c9c"}}, 0x65) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) close(r1) memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) 14:12:42 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000500)={0x65, 0x75, 0x0, {0x5a, "25f5b12db254a6d3857ac4b4f91265a781e7af607c00000005006e0a630e82f982e03a062a296352467f3395ad75b1ad1257d1e84657ddeba5efc62c9a9826e17d295c844d7211124be3ee8e52965a50f21d0329bee47c02faf0"}}, 0x65) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:42 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r0) 14:12:42 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000580)=0x80) fcntl$dupfd(r0, 0x0, r2) 14:12:42 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x5451, 0x0) 14:12:42 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) rt_sigreturn() r1 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r2 = dup(r1) write$cgroup_pid(r2, &(0x7f0000000080), 0x39) sendfile(r1, r2, &(0x7f0000000100), 0x46aa282e) 14:12:42 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002340)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) r2 = dup3(r1, r0, 0x0) rt_sigreturn() write$P9_RFSYNC(r2, &(0x7f0000000100)={0x7}, 0x7) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) write$P9_RSTATFS(r0, &(0x7f0000000280)={0x43}, 0x43) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) 14:12:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 14:12:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000000c0)=0x80) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 14:12:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={0x0}}, 0x0) 14:12:42 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0x5451, 0x0) 14:12:42 executing program 0: r0 = open(&(0x7f0000001e80)='./file0\x00', 0x105043, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x14}, 0x14}}, 0x0) 14:12:42 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 14:12:42 executing program 4: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r3) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000840)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 14:12:42 executing program 1: semget$private(0x0, 0x4, 0xaf8bcf7f38dbe735) 14:12:42 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) read$watch_queue(r1, 0x0, 0x39) 14:12:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x84090) 14:12:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xdc}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r2 = getpgrp(0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) tkill(r2, 0x14) 14:12:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x14}, 0x14}}, 0x40000) 14:12:42 executing program 0: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000b00)={'icmp\x00'}, &(0x7f0000000b40)=0x1e) 14:12:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14}, 0x14}}, 0x4000) 14:12:42 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0x32, 0x75, 0x0, {0x27, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c"}}, 0x32) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x2e, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0xe0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x104c, &(0x7f0000001440)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) close(r1) syz_io_uring_setup(0x0, &(0x7f0000000280), 0x0, 0x0) rt_sigreturn() r2 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5', 0x6) fallocate(r2, 0x0, 0x0, 0x400001) fcntl$addseals(r2, 0x409, 0x8) 14:12:42 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0xd, 0x4) 14:12:42 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000680)={0x39, 0x75, 0x0, {0x2e, "25f5b12db254a6d385c8be89b812f5a77682aa0c989b1925f65d153d3277202637c096bdcdda178167e9aa79416c"}}, 0x39) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:42 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigtimedwait(&(0x7f0000000080), 0x0, 0x0, 0x8) rt_sigreturn() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={0x0}}, 0x0) 14:12:42 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000002c0)) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x5450, 0x0) 14:12:42 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x2f, 0x75, 0x0, {0x24, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d"}}, 0x2f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000001040)={'syzkaller0\x00', {0x2, 0x0, @loopback}}) 14:12:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001280)) dup2(r0, r1) ioctl$TCGETA(r1, 0x5405, &(0x7f0000001640)) 14:12:43 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RVERSION(r0, 0x0, 0x15) close(r0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x882, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) eventfd(0x0) 14:12:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000040)={0x14, 0x0, 0x0}) 14:12:43 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x54, 0x75, 0x0, {0x49, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280f9c846b7"}}, 0x54) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:43 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack_irc', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) 14:12:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, 0x0) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = gettid() tkill(r2, 0x14) 14:12:43 executing program 3: setuid(0xee01) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 14:12:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x841, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 14:12:43 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 14:12:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x24000014) 14:12:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) 14:12:43 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000600)={0x1a1, 0x75, 0x0, {0x196, "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"}}, 0x1a1) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_open_dev$sg(&(0x7f0000000100), 0x1ff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000001480)=ANY=[@ANYBLOB="010500000000000003000000e9"]) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:43 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x67, 0x75, 0x0, {0x5c, "25f5b12dc45605000000be89fb42c7882f892ef38ad44019ca72c1a7554b887b0e472b7c32586c4358e4da32696976c7d8b61b2503c9c7b69cc082d973147e99ce650eb8ab36486a190cd81e6e6c85ceda1cacb3086d99aaedf35d56"}}, 0x67) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:43 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x24}}, 0x0) 14:12:43 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x149240, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000dc0)) 14:12:43 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x48c0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x5450, 0x0) 14:12:43 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r1, &(0x7f0000000400)={0xb}, 0xb) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:43 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, "ed888aad21188af9ee93d7afb61fd168f9fa21"}) 14:12:43 executing program 0: r0 = mq_open(&(0x7f0000001180)='$~\x00', 0x40, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000001200)=""/57, 0x39, 0x9, &(0x7f0000001240)) 14:12:43 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}}, 0x0) 14:12:43 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigreturn() r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 14:12:43 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x2a, 0x75, 0x0, {0x1f, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82"}}, 0x2a) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:43 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x91, 0x75, 0x0, {0x86, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d040000000000000000000000000070d4502d3dd15ffbd4d621068bfca19e922fb757988a7eb397c95b3bff648818ff8dc06d780fe410bcde08774e562519f9aafc66889eee22ab92360a5d14933a73756c12452bdb3e7738afaa42e15dd527c4ac380e21c0ca8d"}}, 0x91) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RLERROR(r1, 0x0, 0x15) 14:12:43 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000000)={0xaa, 0x75, 0x0, {0x9f, "25f5b1027b09e8d385c8be89b81278a781e7d164c1d2000000186190ae320faa594a860d94b64835abb0c2fb4d19224ff3972b0b9627a60c5b7c615ee731adb2c909b73e35eb249d56dd489acfa969510eceb236b8ab4c9fb2fb151abf0b8a18d3d4b66adac2859c837a255fbcd3c5401108d29e25f4395333fa6994bfbafa8dce8576525bf40a28452dbf831084562c4050f0051d839f065b4c764943b15c"}}, 0xaa) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:43 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 14:12:43 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x42, 0x75, 0x0, {0x37, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871d"}}, 0x42) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) 14:12:43 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x30, 0x75, 0x0, {0x25, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a"}}, 0x30) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:43 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) read$watch_queue(r0, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) 14:12:43 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x82, 0x75, 0x0, {0x77, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7da2e53b47eb85867e370e17f497d040e7d71c16c37de553fe53e45dacb20563021138d522befde963256be8e59da8217957a7f9ec71fc9fa3b7f39c97cac80455cc9b4cb9b00"}}, 0x82) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:43 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 14:12:43 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) 14:12:43 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x7d, 0x75, 0x0, {0x72, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280f9c846b7d1f7fabf9614b34419c2394cac12c3f8cf087045607edf5b5b1d81827247e7ec48d32e8040d0ff676c"}}, 0x7d) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() exit(0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:43 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/msr', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000540), 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/102) 14:12:43 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x35, 0x75, 0x0, {0x2a, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400"/42}}, 0x35) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:43 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 14:12:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup(r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, 0x0) 14:12:43 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000680)={0x17, 0x75, 0x0, {0xc, "25f5b12db254a6d385c8be89"}}, 0x17) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14}, 0x14}}, 0x40000) 14:12:43 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) read(r4, 0x0, 0x2006) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000003a80)) r5 = dup(r4) rt_sigreturn() ioctl$TIOCGSOFTCAR(r5, 0x5419, 0x0) write$P9_RREAD(r1, &(0x7f0000000980)={0xdc, 0x75, 0x0, {0xd1, "1039de23002db6eef7d1b1d9a91790a9de1362da384df24f3d76719dbeaac1d533ad3b59b0529d9758acec47b7b021b23137d604d8a5e7cd4dc7260601685a408cc14a4c3f8f4b7bb9e8a4beacb6f05c47859f9cdb02de311c44de083fb6f187587fd0f4d02acb0cac43adc7a84e88100f106b9dfa887a37e612a1a9d0d8d3a060f74faf22da68f0698a1e35c8df2bfb4ec30100000013a9b8be675a0fc38a214d58bdbc6ff7b36c1496dcca6ca370f969842ef5aabf90991362e8175e940f00f1b16be71f4b4cad205fb59666372f1ef0"}}, 0xdc) 14:12:43 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) faccessat2(r0, &(0x7f0000000080)='.\x00', 0x1, 0x0) 14:12:43 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x29, 0x75, 0x0, {0x1e, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f49"}}, 0x29) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x33fe0}}, 0x0) write$P9_RSTATu(r3, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000440)={0xffffff73, 0x7, 0x0, {0xc, '/&\xff\x00\x00\x00Y\xcf\x101@/\xaa\v\xba(\\\x8f\xc0\xbcB\x12\x92=s Y\xc9\x83\xd8X\xaa\'\xb1\xa5\xb7\x8a\xde\x96\v\xdc\x05\x9c\x93\xee\xae6+\xbcVub9\xf9\xf7y\xb1`\x87\x86\xe2\x16m\xd4\x1c\x9cr\xbf\xd7\xfc(n\xb9\x00b\"LF\x92K\xc0\x99\x9c\x05\x88\xbe>sn\x9a}[\xea\xed\xf6^\x89H\xa3\x9b\x16\xaf\xa0\xa5\xf1\xb6\xa1\xa2\x986\x8c\x01\xa1\x13\xc2\xd4\x18\x99\x18r\xf6\x19\x81\xf0\x87x\xc8 \xbf\x99\x87\x87l\x00V\x01%\f\f\x8a\xa4\xb9\x11s\x9a\'X\xff\xc2w\x18\\HM:\"\xc5\xcd}$\xc1\xbf\xdc\t\x00\x00\x00\x00\x00\x00\x00l\xe9\xe3\xb9\xf9\x88U\xb5g\x98\xfex\x94a\xf5\xd3\r\xbb\xd7\xce\x8c\x96\xd9\xcfY&\xa6\x82\x12`D\xdd.\x0e\xf9\t6\x87LT\x1ai*o\x84$\xcdG\x13\xadd\x8e\x8a\xcd\xe0\x02`\xff[\xe9\xbb\xcc/\x91\x06\xbc8\xba\xd3Jc\v\x98b\x88\xcd\xbdo\xe2\\\xbc\x05\xd1\xf8<\xf53\xa6=\xf4\xad\x8b\x1c\xdf\xe2\x9e\xe9\xbd\x1c3;\x9amJ\xa0\x192\xbf=u\xf4I\x9a\x8dSY\xd0\xa3\xda!q\xfcXg\b\xcc\xf6Qk\xb8\xc6\x89\"8G\'\xad>2LR\x0f\xc2\xe4n?\xad\xb4?\xbc\xf6\x1a\xa8q[\xd4e\xc85\xaf\xd1y\x9d\xee}P\xbc\xa0o\xd5\xfe\xb1\xdf\xb3\xfeW\xb51\xd4\x1a\xc2\x16\x97\x9a\xc6lN\x9c\x8d{Y\xa2\xfa\xa5,\xbe\x97'}}, 0x10) 14:12:43 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c}, 0x1c}}, 0x0) 14:12:43 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATu(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB=')'], 0xa29) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:43 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x14}, 0x14}}, 0x20004090) 14:12:43 executing program 3: pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000f80)) 14:12:43 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x15, 0x5) 14:12:43 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000d00)={0x1, &(0x7f0000000cc0)=[{0x6}]}, 0x10) 14:12:43 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf32(r1, 0x0, 0x0) 14:12:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15ee5", 0xbe}, {&(0x7f0000000a00)="316f825a3d29f9", 0x7}], 0x2}}], 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000001780)="8d7de44853a460a4cc58fc9c9c461601c49b855bd2b5392d6e59e4fbc33858be828c5840ba99e5d8d8989e700ae1a2631fb6c4b2f19798055bdc35f0b0fb3719d1b634e31d9f960356e07b15604342b256a1816a6fadeca29c3645843a115e955b6a", 0x62}], 0x1}}], 0x2, 0x16da) 14:12:43 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000500)={0x13a, 0x75, 0x0, {0x12f, "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"}}, 0x13a) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:43 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000000c0)={0x61, 0x75, 0x0, {0x56, "b850e64e921fe5005f876f0e6db32a71f600433f0b44b8ac08a5ad2b4223872fb95a3866da939999f3d665e2cd425122e4b3a71541017d8494950df3113271f19a563bbe6e102ad6930446d2b92cd7c7fda596a57f6c"}}, 0x61) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:43 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x30, 0x75, 0x0, {0x25, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e824a0aad78ef4f"}}, 0x30) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5', 0x6) fallocate(r3, 0x0, 0x0, 0x400001) fcntl$addseals(r3, 0x409, 0x8) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:43 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x74, 0x75, 0x0, {0x69, "25f5b12dc45605000000be89fb42c7882f060000000000000072c1a7554b887b0e472b7c32586c4358e4da32457da9f1c1cd82e403c9c7b69cc082d973147e99ce650eb8ab36486a190cd81e6e6c85ceda1cacb3086d99aaedf35de84d69efc715d2f553fdd09b9b1d"}}, 0x74) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) 14:12:43 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000), 0x4) 14:12:43 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000680)={0x33, 0x75, 0x0, {0x28, "25f5b12db254a6d385c8be89b812f5a77682aa0c989b1925f65d153d3277202637c096bdcdda1781"}}, 0x33) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:43 executing program 4: r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 14:12:43 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x1a, 0x75, 0x0, {0xf, "25f5b12db254a6d385c8be89b81278"}}, 0x1a) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:44 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_START_SYNC(r0, 0x5450, 0x0) 14:12:44 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000a00)={0x6ed, 0x7d, 0x0, {{0x0, 0x4e0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x19d, '\x00\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x02\x01J0\x82\xe6L\xbaX!\x04\xe1[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)[\xd2;S*\xfc\xb1\xc9\xa3\xf6\xb4\r\xe8\xb5\xf2{\'\x11+gUf\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xef\xb5Yk\xec51f\x1f\xc8j<^\x94\x82\x01\x03\xa5\xbcp\xed\xb4\x00\x00\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xd6\x9e\x00\xee;\xb3\xd2o\x8fK\xcc~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee;/\xf6\x9f\xcb\x8ac#\xa2\xf7\xe6\x19\x10_\x81iP\x17W\xbai\xd6\xf98p\xe0\x1a\x80-U\xf6\xe0$p\xb0\xf5\xaa\x98\xbf\x03\n\x1a\x82J\x01Z\xa6\xc3\xc6\x14t\f\xc2\xfdR\x87cp\xe0\x15\xfc-\xe1\x82\xa0\xb7\x1d\td\x1d\xe9\x9c\xe1\xadU\x1c\xbc\xe1L\xee\x8b,\xfcm\x8c\x81\xa7\x17W\x04\xd2\x89W\'*0(\x1bS\x91\x80\x1e+Dw\xed\xe0\xd7a\x9dz(U3\x9b\xcf\xde\x03\xe6 b\xd8\xab-\xfc\x00\xfb\x04b\xb8\xe3\xcd\xea\xd9\x0e\x01\x95\x00\x00U\xdb\x88\xa05\xc4\xc4`\xce\xd1x6\xe3\xb0M\x853D\a\x11\x90\xa2\x94\xdd\xfdaQ\xc0\x96c\x7fP\xbfm\xbc\x8e\xdb\xbc\xe5\xed\xe5\x10\xe2\xed\x94E\xd4S\xf9<]\xa9\x9a\xe1\x8c0GX\x18\x8e&mZ\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xebWk\x84\x1a)\x16\x0f2Q\xe3\x97?\x86\x0fX\xd1x\xa1w\a\xc23$\xb4\xd0h', 0x1a6, '\xf1\x96\xc14\xaf=-\x0e\xc6\xfa{i\xe1\xd5/\x98\xc4\xf7\x10AY\x89\x87\x1dp\x88\xa0(\xeb\xfc\xfe\x95_\xe4.\xf3\xdc\x19\x04`\x1e\x13\xf4?!.n(\xf9\xd7oK`\xc0jV\x8e\n_\x83K\x89\xad!7\xea\x1d\xf7\x93\\\x86k\b\xb4Z\xc0\x12\x9c)\x7f\xb0\xa1\xfaN\x88\xbb#\xc3O\x96\x8cH\x83\xf6\xe2\xda \x80\xc9\x1a\x04\xff\xedgi]@\r\xd1\x8a&\x01\x95T\xd0T\x13iu\xc73\x96\xb5\xb8ZI\x8d\xff2%;&\xb7\x98\xca\xac\xf8\f\xc1gX\xf1\xdf\xcb_=r\xd7Q\xe9\xfe&\xfe\xcb\xc4\a\xa5\xde\xa62\xbf\xaeig\f\x9d\x10\x0f]\x02\xf7\x81\xbdap\x9a\xed\xa3k\b\x18\xb5\x8c\xbb\x9a-sQ\x0f\xd0\xd0\xcb\xf3\x87%\xe6X\xa6R\xb0\xa9>\x8a\xe87\x8eVj\x11S\xc8.P\x92\xdc\xb6dh\x10\xa5+\xc1\x8e\x94\xf9\x98\x1d}~\xc2\"\x0f\xf1\x9c`\x92\x9b0\xd9\xdb\x19\f\x82\x00r\x1b\xbc\xc3\xa0\'\x0e A/\x85\xe4\x97\xedG)\xb5\xe1Ou\xb3\xc9\xb1\xc7\xac2O\xa3\xd8\x1f\xdel\x88h\vj ~\x8c\x99\xbe=?\x01\xae\xddJS\x8bF\xdd\x11\x19\xd0\xcda\x0e\xff\b\xda\xa6\x9e\xb0\x15\xb9\xe0\x1b\xf0D/$\xa8Mh\xbbp\x00QRi+P\v07\xf6R\x8b\xeb\x98B\x1b\xa7\xa3\xde}M\x9cG\xe83!p\xeb\xcf\xc8\x01/\b\x12h\xc6HLuO\x97\xa8\r\xfa\x16\x81\x1a\xe0\xb16\x8e\x19\x9aW\xfb\xa3\xfdx\xbc\x03\xe77\x1f\xc6\xa9c\xa4$\xed\xbe\xeb\x1f\x9b\x151\xf4\x8de\xc3-\x1aJ[\xd8\xc0RA!U(=\x81\xed\xb0O\xd3\xa9oMP\x81\xdf\xf4\xd6\xed\xf0t\xfc\xf6\xf0Q\xf7\x1f\x9f\xcbe\xaa\xd8m\xd9\xc9*t\x8f\x0e\x82]\xea\x99\xa5 \\\x16r\xd1\x93h\xa5\x01\xce\x1b\xfb\x97,od\xeb\xfaw\xfa\xd4\xfe\xac\xe9\x7ff]f\xbe\x9eJDD\a\xe0\xed\xca\xf7\t\x84\x12\xc6T\x15\x1a\x14E\x8f<\x0f\x97\xd9\xf1di\xc1\"\x01m}\xdak\xe5\xb3ARS\xff\x7f\xe9\xe5\xa2\xd8\xbe\xed\x9a\xfc7\aC\xacO\x9a\xb9w\xcd\xbc:m\x18-\xfdlo\x13\x9bF\x0f\\\xb4;\xeeA\xe2f\xbc\xa2Hj\xacVM\x03\x94\x9c\x88 \xb6\x1b\xa0f\xf1\xe7\xa9\x9bB\xe4?\xd2\x80\xac\xdd\"\a|\'\xb9=I}\xf5?\x95\xb5\xb25\x94\xa2\xfc\x89\x00\"\xc3\vY\x06\xf9f\x00'/238, 0x7c, '\x89,%YO\xa4\xe4\x9fY\x89a\xe1(\xaa\x14\xae\xday!\x8d\x1d\xd8f\xae.t\xb2Jc_-e*\xef\x8b_\xd2\x97Z\xc2\xad2\x9d\xa4\x10j\x1c\x1de\xbc\xa6\xf0\xa6\n|\xdf\x04B\xb9>\xd8\xaf\x96~\xc2\xfc\x92\x00\x10\xddg\x14\xd4\x91c \xb1\xb1\x9bL\xca\x1c9\xa3\xd0\xf2S\x98\x1f6\xf0n\xde\xf3\xeaJ\xa1\xc0\xfa2\xb2\x03\x1f\x00\xe5\x04\xc1\x9f\x9a\xff\"\xc6+nN\x89\x00\x04\x00\x00\xb7c\x9c}'}, 0x218, '\xea\x17\xaag\xa0\xe9@\xbd\n\xfc\x01}\xff\x16H\x99;/vo\'\x86\v\xaf\x16\xdb\xba\xee$z\x85K\x17\f\xeb\x8a\b\xd2\xea\xa0\r\x00\x00\x00\x00\x00\x001\x05x\xf7\xea\xfbw\xcaw\aL\x88v\xcb}\xa0\x90\xe7f\x9c\t \"\t\xbe.\x94\x12\xe8\x9f\xf8b\xba&r\x12y=\x7f\x80D\xb3*Dbu\x9f&Z\xff\xf6\x02l\xa4\xb2K?\b\x1b\x91\xb4\x98\xf0\xc3\x1a\xcdmKn\xdai\x84\x9a\x9b\x19\x84\x9b\x85\xcf\x9b_\xba\x02\xf3+[\xf9\x19\xa6\xf1\x96;\x8a\xaeN\xf4E\x8c\'\xae\x00O\x8d3\x0f\xe2W\x02\b\xb51=+Z\xe1r \x1e\x13q-L+C\xce\x92M\xfb\xe7nq\x83\x05\xdd\xe6\v\xa9\f\xea\xfe\x89\xea\xa2-\xb7\xff\xb0\v\x06/\x9a\x04h\x1b\xecm|0\xf6\x87\xf7\xf0\xb2\xd3\x98\xcct\x06\xff\xa0\r\xb1)\xf5lW\xca\x9d\x163!\xc4U\x95\x13\x02\xa8\xbf\x17\x17\x93\xf2V!P\x82\xbe\x0f\xef\x92\x92\xf5\xfd\x02\xd5\xb8\xaf@\xb0A&\xa3XU\x0f\xde|\x1c\xf9\x1a\x86\xec\x81Z\x88\xb7s\xc8\x96\xb9\xd2J\n\xa8\xb7\xcb=\xec\xf6\x80\xae\x7f+8\xca\xd0P\x04)\xc2\xa6\xba\xa4\xf1', 0xee00}}, 0x6ed) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r4 = syz_open_pts(r3, 0x0) read(r4, 0x0, 0x2006) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x14}, 0x14}}, 0x0) 14:12:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000540), 0xb45d, 0x121042) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5}) 14:12:44 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001600), 0x80042, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) 14:12:44 executing program 2: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb82e336200000000) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x5421, &(0x7f00000001c0)={@dev}) 14:12:44 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000001900)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', &(0x7f0000002a40)={0x42}, 0x18) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 14:12:44 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, 0x0, 0x0) 14:12:44 executing program 1: r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = pidfd_getfd(r1, r2, 0x0) ioctl$TIOCSBRK(r3, 0x5427) 14:12:44 executing program 3: r0 = timerfd_create(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) signalfd4(r0, &(0x7f0000000000), 0x8, 0x0) 14:12:44 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0xb2, 0x75, 0x0, {0xa7, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309ec290ef7d1c0f6d03c178e7dd934cf77312873cf98c3825b097b45c0122ca4c141103a77f236df342306dd258be938f39409eaf669b34f95ef646e9ed3a81de101b7c14468cf871c019c864f205a3bf5ed7091d7d162944bb4c948ce4007e0e7745a8efb9721129595d7f8289abc322a77d99a639d2a5c824254a9"}}, 0xb2) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:44 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r1, r0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000007c00)=[{&(0x7f0000000380)={0x10}, 0x10}], 0x1}, 0x0) 14:12:44 executing program 0: mount$nfs(&(0x7f00000004c0)='//.\x00', &(0x7f0000000500)='.\x00', 0x0, 0x1801, &(0x7f0000000580)) 14:12:44 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup2(r1, r0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 14:12:44 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000780)={0x323, 0x7d, 0x0, {{0x0, 0x28b, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x14a, '\x00\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x02\x01X!\x04\xe1[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0[\xd2;S*\xfc\xb1\xc9\xa3\xf6\xb4\x1b\xaf\x9e\xdbM\x17\xb9\xb2J\xec\xb1\x99\x95m\r\xe8\xb5\xf2{\'\x11+gUf\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xfem\x1d0aU=\x1eE\xe9w\x1f\xc8j<^\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xd6\xf1\xb3\xe3\xffc\xd5\xb4\xe6K\xcc~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee;/\xf6\x9f\xcb\x8ac#\xa2\xf7\xe6\x19\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80-\xe3:\xe0$p\xb0\xf5\xaa\x98\xbf\x03\n\x1a\x82J\xf6Z\xa6\xc3\xc6\x144\f\xc2\xfdR\x87cp\xe0\x15\xfc-\xef\x82\xa0\xb7\x1d\td\x1d\xe9\x9c\xe1\xadU\x1c\xbc\xe1L\xee\x8b,\xfcm\x8c\x81\xa7\x17W\x04\xd2\x89W\'*\x10(\x1bS\x91\x80\x1e+Dw\xed\xe0\xd7a\x9dz(U3\x9b\xcf\xde\x03\xe6 b\xd8\xab-\xfc\x00\xfb\x04b\xb8\xe3\xcd\xea\xd9\x0e\x01\x95\x00\x00', 0x74, '\xf1\x96\xc94\xaf=v^\x98\xd7\x13\xdb-\xe3S\xb9\x84\x9f\x13g\xb6\x03#\x99\xc1A.\xf9\xac\v;\xae\x99|9\xdb(mw\xbe)BGD/\xcb\xd4\x90\xe5\x1d\x95g\x95*\x82\\(w\x1b\xcb!\xd57;D\xb9o\xbd\xc1\xc5\xde?x0\x96\x16\b\xda\xb1\xab~\x9d3}\xe1\x92\xcf\xae\xc0qe\xb0\x91Y\x10~\x8e\xa8\x90\xbf\x8f\xf7Uhy\x92|\xc5D>\xab\x1d\xc9ZB%', 0xf, '\x80\xf4\x86\x82m\xe9\x1agt\xf8\x00\x00\x00\x00\x00', 0x8b, 'trans=fd\x15P\xd9\xcb\xc7\x96\x95\xa0?\xaft\xd8\xbe\xc3\x969\'\r2Oz\xb2\xc4<\xe49s\xe1f\xda\x86\xd7s\xb7\x00T\xc8\xd8\xead\xc5\xfb5\xbb\xe4@\x05\xe6\xcc\x15jh\xaex\xdc\r\x18\xe1\xa64\"\xde\x1e\x05!\n\xcf,\n\x06m9\xdc \xd6\xd9X\x85\x18\x87\xb3\x8a\xb7t\x86\xc0\xb6\xa3\x1e\xd87\x81\xbf\xb2H\aE3\x80q*\xcb\x88\xea\xd25\xfd\xd8]\x04&e3\xbb\x19\x00\x82\x85F{\a*c\xc4VT\xc7\xb5\xb3\xce\xac'}, 0x83, '\xea\x17\xaag\xa0\xe9@\xbd\xff\x16H\x99;/vo\'\x86\x8b\xaf\x16\xdb\xba\xee$z\x85K\x17\f\xeb\x8a\b\xd2\xdb\xa0\rC\xc4\xab\xf3\x00\x001\x05x\xf7\xea\xfbw\xca\xa0\x90\xe7f\x9c\t \"\t\xbeN\x94\x12\xe8\x9f\xf8b\xba&r\x12y=\x7f\x80D\xb3*Dbu\x9f&Z\xff\xf6\x02l\xa4\xb2K?\b\x1b\x91\xb4\x98\xf0\xc3\x1a\xcdmKn\xda\xdb\x8a\xeb\xe7\xd0\xa7?\xa4\x8ag\x0e\xf0\xeei\x84\x9a\x9b\x19\x00\x00\x00\x00\x00\x00\x00', 0xee00}}, 0x323) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='devices.list\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_xfrm(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], 0x33fe0}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xd0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000016c0)) 14:12:44 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x31, 0x75, 0x0, {0x26, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000"}}, 0x31) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) rt_sigreturn() ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x335}) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:44 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x36, 0x75, 0x0, {0x2b, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865"}}, 0x36) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000340), 0xffffff46) dup3(r4, r3, 0x0) rt_sigreturn() writev(r3, &(0x7f0000000340)=[{&(0x7f00000002c0)="c4", 0x1}], 0x1) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:44 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack_irc', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0x3c48, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000000c0), 0x0) 14:12:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000d00)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) close(r1) socket$netlink(0x10, 0x3, 0x2) 14:12:44 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 14:12:44 executing program 3: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r0, r1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000f00), r2) 14:12:44 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x117, 0x75, 0x0, {0x10c, "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"}}, 0x117) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) write$P9_RSETATTR(r0, 0x0, 0x0) close(r1) 14:12:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14}, 0x14}}, 0x20000000) 14:12:44 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="e7"], 0xe7) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:44 executing program 2: mkdir(&(0x7f0000000cc0)='./file0\x00', 0x110) 14:12:44 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x1d, 0x75, 0x0, {0x12, "25f5b12db254a6d385c8be89b81278a781e7"}}, 0x1d) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x33fe0}}, 0x0) write$P9_RSTATu(r3, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000440)={0xffffff73, 0x7, 0x0, {0xc, '/&\xff\x00\x00\x00Y\xcf\x101@/\xaa\v\xba(\\\x8f\xc0\xbcB\x12\x92=s Y\xc9\x83\xd8X\xaa\'\xb1\xa5\xb7\x8a\xde\x96\v\xdc\x05\x9c\x93\xee\xae6+\xbcVub9\xf9\xf7y\xb1`\x87\x86\xe2\x16m\xd4\x1c\x9cr\xbf\xd7\xfc(n\xb9\x00b\"LF\x92K\xc0\x99\x9c\x05\x88\xbe>sn\x9a}[\xea\xed\xf6^\x89H\xa3\x9b\x16\xaf\xa0\xa5\xf1\xb6\xa1\xa2\x986\x8c\x01\xa1\x13\xc2\xd4\x18\x99\x18r\xf6\x19\x81\xf0\x87x\xc8 \xbf\x99\x87\x87l\x00V\x01%\f\f\x8a\xa4\xb9\x11s\x9a\'X\xff\xc2w\x18\\HM:\"\xc5\xcd}$\xc1\xbf\xdc\t\x00\x00\x00\x00\x00\x00\x00l\xe9\xe3\xb9\xf9\x88U\xb5g\x98\xfex\x94a\xf5\xd3\r\xbb\xd7\xce\x8c\x96\xd9\xcfY&\xa6\x82\x12`D\xdd.\x0e\xf9\t6\x87LT\x1ai*o\x84$\xcdG\x13\xadd\x8e\x8a\xcd\xe0\x02`\xff[\xe9\xbb\xcc/\x91\x06\xbc8\xba\xd3Jc\v\x98b\x88\xcd\xbdo\xe2\\\xbc\x05\xd1\xf8<\xf53\xa6=\xf4\xad\x8b\x1c\xdf\xe2\x9e\xe9\xbd\x1c3;\x9amJ\xa0\x192\xbf=u\xf4I\x9a\x8dSY\xd0\xa3\xda!q\xfcXg\b\xcc\xf6Qk\xb8\xc6\x89\"8G\'\xad>2LR\x0f\xc2\xe4n?\xad\xb4?\xbc\xf6\x1a\xa8q[\xd4e\xc85\xaf\xd1y\x9d\xee}P\xbc\xa0o\xd5\xfe\xb1\xdf\xb3\xfeW\xb51\xd4\x1a\xc2\x16\x97\x9a\xc6lN\x9c\x8d{Y\xa2\xfa\xa5,\xbe\x97'}}, 0x10) 14:12:44 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x5451, 0x0) 14:12:44 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0xfffffd3a}}, 0x0) 14:12:44 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xb8, 0x75, 0x0, {0xad, "25f5b12da264a6d385c8be89c88483459b8a8fb7e631fcbe609d840a5a0df5af2862ce60a7377ed49dd656494ede7f514117f1fbd0eb98d63a4f3fc5dd131bbfd9069bc999fe6e6907a67d3e42af3cd5fe3776bfcdd5b7b138db58f94e633cf36a9e7e201a373817cd9aa299c0cb999713440ac75f6b91b861ba99e37b6bbeea5300d65d087162b14fc011b1f0e11ccbb1fbba5ae0e224d32a36c6f590524cf6ce1f8d3227a527ede7009fd928"}}, 0xb8) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) recvmmsg$unix(r4, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:44 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 14:12:44 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x2a, 0x75, 0x0, {0x1f, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82"}}, 0x2a) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) write$selinux_attr(r3, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:44 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) fsetxattr$security_ima(r0, &(0x7f00000000c0), 0x0, 0xfffffffffffffe9a, 0x0) 14:12:44 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x45, 0x75, 0x0, {0x3a, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb9163"}}, 0x45) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:44 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x9c, 0x75, 0x0, {0x91, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309ec290ef7d1c0f6d03c178e7dd934cf77312873cf98c3825b097b45c0122ca4c141103a77f236df342306dd258be938f39409eaf669b34f95ef646e9ed3a81de101b7c14468cf871c019c864f205a3bf5ed7091d7d162944bb4c948ce4007e0e7745a8efb97"}}, 0x9c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000b80)) 14:12:44 executing program 2: setreuid(0x0, 0xee00) r0 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c}, 0x1c}}, 0x0) 14:12:44 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 14:12:44 executing program 0: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r2, r1, 0x0) r3 = accept4$inet6(r1, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x5451, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5451, 0x0) fcntl$dupfd(r0, 0x0, r0) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x30, 0x0, 0x9, 0x33, 0x0, 0x5, 0x12, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xa8d, 0x1, @perf_config_ext={0x9}, 0x220, 0x8, 0x4, 0x1, 0xffffffffffffff00, 0x6, 0x8, 0x0, 0x7, 0x0, 0x8001}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = mq_open(&(0x7f0000000200)='\\\xa5\xafx\xe6\x04', 0x40, 0x81, &(0x7f0000000280)={0x6, 0x100, 0x2b, 0x20}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x8) dup3(r4, r5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000380)={0x7fff, {{0xa, 0x4e24, 0x100, @mcast1, 0x8001}}}, 0x88) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x5451, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x48) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10b) close(0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x5451, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) 14:12:44 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x7b, 0x75, 0x0, {0x70, "25f5b147b2eb183aec9e5692d6e8fd89601f9644adc64b35e4b26a8881cea3f71692d7f47262f49051c3d231afd1a75e8ca80c4cd63d18d79ae83e6b1a3403009f634dd06749720111145d451e9b3d82bd2bf4f19f780d14142f4beb2ed1e794106b2caec53a95397d94cb721186ba98"}}, 0x7b) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:44 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xb1, 0x75, 0x0, {0xa6, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63986e851b0cb4be35de2edfe3b50591fcb4fab33eb62a9cd3e323f0037587fa02aeaabc0adcf60b3aabafc5faa766166c"}}, 0xb1) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:44 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigtimedwait(&(0x7f00000003c0), 0x0, 0x0, 0x8) rt_sigreturn() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x8, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:12:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/power', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=@getsa={0x28, 0x12, 0x0, 0x0, 0x0, {@in=@loopback}}, 0x28}}, 0x0) 14:12:44 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000980)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) 14:12:44 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001180), 0x8, 0x0) r1 = syz_open_dev$loop(&(0x7f0000001240), 0x7, 0x0) r2 = dup3(r1, r0, 0x0) r3 = open$dir(&(0x7f0000002780)='./file0\x00', 0x24040, 0x0) r4 = dup2(r3, r1) ioctl$LOOP_SET_FD(r2, 0x4c00, r4) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) 14:12:44 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x105043, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) 14:12:44 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x64, 0x75, 0x0, {0x59, "25f5275eb854a6d385070cacd1666f313125c8be89b81278a76ae7d164bd531a4e9685753a8c4c0140dff2a0cc8ee2bdf0892c459108fb63ae158483e17cc815f0b254ef8aa56e0c8544d70fc00131f485396e043bafb282dd"}}, 0x64) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RLERROR(r1, 0x0, 0x15) 14:12:44 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 14:12:44 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x1a, 0x75, 0x0, {0xf, "25f5b12db254a6d385c8be89b81278"}}, 0x1a) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001740)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x0) 14:12:44 executing program 2: rt_sigtimedwait(&(0x7f0000000140), 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x8) rt_sigreturn() pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="e5ea7e"], 0x1e5) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 14:12:44 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x3f, 0x75, 0x0, {0x34, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322"}}, 0x3f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:44 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fstat(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FITHAW(r2, 0xc0045878) 14:12:44 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCGID(r0, 0x80084502, 0x0) 14:12:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0xffffffffffffff79}}, 0x0) 14:12:45 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x1f, 0x75, 0x0, {0x14, "25f5b12db254a6d385c8be89b81278a781e7d164"}}, 0x1f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:45 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe2(0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x5450, 0x0) 14:12:45 executing program 2: pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="86"], 0x586) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$rfkill(r3, &(0x7f0000000680), 0xfffffe5b) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}}, 0x0) 14:12:45 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000680)={0x12, 0x75, 0x0, {0x7, "25f5b12db254a6"}}, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/power', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) 14:12:45 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000000)={0x6d, 0x75, 0x0, {0x62, "25f5b12db25605000000be89b81278a78159fa98ba58cb9ed9ab51551560c2e7af617c15d164c1d26e0a9b4d27da08271b35ef24b33df29933a03032e9cfd9110f48a913c4634907000000654c0f41885d5fd4d0c477d4141834a720020fd01e2d7a"}}, 0x6d) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) accept$unix(r3, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:45 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x32, 0x75, 0x0, {0x27, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e824a0aad78ef4f26dc"}}, 0x32) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5', 0x6) fallocate(r3, 0x0, 0x0, 0x400001) fcntl$addseals(r3, 0x409, 0x8) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:45 executing program 3: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) 14:12:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigreturn() r1 = memfd_secret(0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x44}}, 0x0) 14:12:45 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x5450, 0x0) 14:12:45 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x44, 0x75, 0x0, {0x39, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb91"}}, 0x44) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:45 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000340), 0x0, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r2, 0x0) connect$inet(r1, &(0x7f00000004c0)={0x2, 0x2, @remote}, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:12:45 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[], 0x14}}, 0x0) 14:12:45 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) preadv(r2, 0x0, 0x0, 0x0, 0x0) 14:12:45 executing program 4: mknod$loop(&(0x7f0000000c40)='./file0\x00', 0x0, 0x1) lsetxattr$trusted_overlay_nlink(&(0x7f0000002300)='./file0\x00', &(0x7f0000002340), &(0x7f0000002380)={'U-'}, 0x16, 0x1) 14:12:45 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)) 14:12:45 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 14:12:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000400)) 14:12:45 executing program 2: r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "9b9063cf3ab58e8c07d16dcd45ad77b0e29fa2"}) 14:12:45 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0xbc, 0x75, 0x0, {0xb1, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d040000000000000000000000000070d4502d3dd15ffbd4d621068bfca19e922fb757988a7eb397c95b3bff648818ff8dc06d780fe410bcde08774e562519f9aafc66889eee22ab92360a5d14933a73756c12452bdb3e7738afaa42e15dd527c4ac380e21c0ca8dfa77493118246139e4239af5255ebdcacdd59f46b4175b5e1ca4518b9161dbb610d7be18bbac2cdcb6c3ff"}}, 0xbc) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RLERROR(r1, 0x0, 0x15) 14:12:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x841, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) 14:12:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) r2 = io_uring_setup(0x3c2c, &(0x7f00000000c0)) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) socket$inet(0x2, 0xa, 0x0) close(r2) 14:12:45 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) setxattr$incfs_id(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40), 0x20, 0x1) 14:12:45 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x5451, 0x0) 14:12:45 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xa5, 0x75, 0x0, {0x9a, "25f5b12db254a6d385c8be89b812780400e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7da2e53b47eb8988337f2898ac95867e370e17f6c37de553fe59844383f6b98d5748aaa552f788c32cf48ad363dff3c0f8f6064485eae70d1f8b59cc4649defaf2558b86f750a4729a1df711c460073b70effd3b43711d151ebea2210b067fc6f023f68a5fdd929bbf8"}}, 0xa5) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:45 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = dup3(r0, r1, 0x0) dup(0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000009c0)) 14:12:45 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x33fe0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000140)=0x80) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x24}}, 0x0) 14:12:45 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x14, 0x75, 0x0, {0x9, "25f5b12db254a6d385"}}, 0x14) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40140, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) accept$packet(r3, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:45 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) accept4$packet(r5, 0x0, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="46fd"], 0x15) 14:12:45 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x27, 0x75, 0x0, {0x1c, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e1"}}, 0x27) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:45 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0xfffffe6e}}, 0x0) 14:12:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = memfd_create(&(0x7f0000000780)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca', 0x0) write(r1, &(0x7f0000000140)='/', 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r1, 0x0) recvmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:12:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000280)) 14:12:45 executing program 2: r0 = memfd_secret(0x0) r1 = dup(r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x5451, 0x0) 14:12:45 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/prev\x00') write$P9_RRENAMEAT(r0, 0x0, 0x0) 14:12:45 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xae, 0x75, 0x0, {0xa3, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63986e851b0cb4be35de2edfe3b50591fcb4fab33eb62a9cd3e323f0037587fa02aeaabc0adcf60b3aabafc5faa7"}}, 0xae) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) write$tcp_congestion(r3, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:45 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0x22, 0x75, 0x0, {0x17, "25f5b12db254a6d385c8be89b81278a781e7af607c15d1"}}, 0x22) r2 = creat(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) nanosleep(&(0x7f00000002c0)={0x0, r3+10000000}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:45 executing program 2: poll(0x0, 0x0, 0xea) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000003a80)) r2 = dup(r1) rt_sigreturn() ioctl$RTC_UIE_ON(r2, 0x7003) 14:12:45 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_BLKSECTGET(r0, 0x1267, &(0x7f0000000080)) 14:12:45 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) 14:12:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) 14:12:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/power', 0x0, 0x0) dup3(r0, r1, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000040)={0x7}, 0x7) 14:12:45 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x4b2) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:45 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x30, 0x75, 0x0, {0x25, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d040000000000"}}, 0x30) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0x7, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) 14:12:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup3(r1, r0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5451, 0x0) 14:12:45 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000000)={0x22, 0x75, 0x0, {0x17, "25f5b12db25605000000be89b81278a78159fa98ba58cb"}}, 0x22) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x4000400) 14:12:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14}, 0x14}}, 0x40) 14:12:46 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002b00)={0xfffffffffffffdb2}, 0x14}}, 0x0) [ 662.179790][ T5659] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:12:46 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@broadcast, @in6=@private1}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, 0xe8) 14:12:46 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x48c0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000000080)) [ 662.238174][ T5659] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:12:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netstat\x00') read$rfkill(r0, 0x0, 0x0) [ 662.302296][ T5659] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:12:46 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000940)=ANY=[@ANYRES32], 0x473) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = epoll_create1(0x0) rt_sigreturn() epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x902) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:46 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r0, r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}}, 0x68}}, 0x0) 14:12:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000036c0), 0x0, 0x0) dup2(r0, r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) [ 662.345741][ T5659] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:12:46 executing program 4: creat(&(0x7f00000001c0)='./file1\x00', 0x0) open$dir(&(0x7f0000000300)='./file1\x00', 0x28000, 0x8) 14:12:46 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x32, 0x75, 0x0, {0x27, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c"}}, 0x32) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:46 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x48c0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000940)={0x14}, 0x14}}, 0x0) 14:12:46 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001400)={0x14}, 0x14}}, 0x0) 14:12:46 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000080)) [ 662.462143][T17349] chnl_net:caif_netlink_parms(): no params data found 14:12:46 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 14:12:46 executing program 2: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000080), 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 14:12:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_all\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x33fe0}}, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) syz_clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 14:12:46 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x7e, 0x75, 0x0, {0x73, "25f5b12da264a6d385c8be89c88483459b8a8fb7e631fcbe609d840a5a0df5af2862ce60a7377ed49dd656494ede7f514117f1fbd0eb98d63a4f3fc5dd131bbfd9069bc999fe6e6907a67d3e42af3cd5fe3776bfcdd5b7b138db58f94e633cf36a9e7e201a373817cd9aa299c0cb999713440a"}}, 0x7e) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) recvmmsg$unix(r4, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 662.612634][ T5659] bridge_slave_1: left allmulticast mode [ 662.618422][ T5659] bridge_slave_1: left promiscuous mode [ 662.624169][ T5659] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.649403][ T5659] bridge_slave_0: left allmulticast mode [ 662.655110][ T5659] bridge_slave_0: left promiscuous mode 14:12:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002b40)={0x14}, 0x14}}, 0x24040000) 14:12:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) getsockname$inet6(r1, 0x0, &(0x7f0000000180)) 14:12:46 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)) [ 662.660858][ T5659] bridge0: port 1(bridge_slave_0) entered disabled state 14:12:46 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x54, 0x75, 0x0, {0x49, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280f9c846b7"}}, 0x54) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:46 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 14:12:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000a00)) 14:12:46 executing program 4: r0 = eventfd(0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) dup2(r1, r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) 14:12:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = dup(r1) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, 0x0) 14:12:46 executing program 4: r0 = mq_open(&(0x7f0000000000)=',%\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0x5, 0x6}) mq_timedreceive(r0, &(0x7f0000000240)=""/167, 0xa7, 0x0, &(0x7f0000000300)={0x0, 0x989680}) 14:12:46 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigreturn() r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x54}}, 0x0) 14:12:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x104c, &(0x7f0000001440)) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) close(0xffffffffffffffff) sendto(0xffffffffffffffff, &(0x7f00000001c0)="6f2a0a2d04d9eae3", 0x8, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) close(r1) 14:12:46 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5452, &(0x7f0000000000)={'wg2\x00'}) 14:12:46 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x58}}, 0x0) rt_sigreturn() pause() 14:12:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x106b, &(0x7f00000000c0)) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) close(r1) close(r0) socket$nl_generic(0x10, 0x3, 0x10) 14:12:46 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigtimedwait(&(0x7f00000003c0), 0x0, 0x0, 0x8) rt_sigreturn() r0 = memfd_secret(0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 662.924309][ T5659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.960080][ T5659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface 14:12:46 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x48c0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x14}, 0x14}}, 0x0) 14:12:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) close(r1) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) 14:12:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000000c0)) 14:12:46 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, 0x0) [ 662.994145][ T5659] bond0 (unregistering): Released all slaves 14:12:46 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x20402, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 14:12:46 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x41, 0x75, 0x0, {0x36, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b187"}}, 0x41) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001740)=ANY=[], 0x33fe0}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x48}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:46 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x5450, 0x0) [ 663.060283][T17349] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.067397][T17349] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.080140][T17349] bridge_slave_0: entered allmulticast mode [ 663.098631][T17349] bridge_slave_0: entered promiscuous mode 14:12:47 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000400)={0x4d3, 0x7d, 0x0, {{0x0, 0x43e, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x135, '\xbe\xff<\x81;+\x87Ka]\xc0\xbe\x11\xe8\x19\x97\xbd8(\xfd\x05\x00\x00\x00\xd9\xecg\x06\xa4\x94\xf7\x1e\x12\xd0\x05\xbeI\x13\xb6\xfb\x9f\x00\x00\x00\x00\x00\x00\x00\x00\xf4\x8b\xbbgX\xf6\xb1\x1d(\xd6\xf5<\x12\xc1\x1b\xd4\x1c\x8c\xae\x8f\x19\f\xaa\xb7\x03\xd6\x9aE,BJ \x99\xf4', 0x11f, '--\xfcCO\xde\'\x0e\fG\xffM\x1a\x027`\x15\x06\fw@\xcb\xe0\x1c6\xf2\xadW\x8d\x91\'5\xd1\xb5\x06\xfeO\x84\xb9\xb9 \x90\xfcy\x99\x19\x16\bI\x9c\xf2\xcd\x88X\x1f\x90\xd4\xaf\xe1\xc4\x14n\xdd5\xe2\b{|\x13\x17\xca\x02\xbf4\xc2\xb4\x87\x9e\f\a\xa8~\x9b6\xa5\xaf\xfa\xce\v8\xa8\xe3\x86\xd5.!\x9b\x98\xdaO\xfcC\xf3d\xec\xe40\t#9:l;>\xef\xb4I\xad\xed\x0f04\xf0\xe8un\xc9\x9e\xa2.\x89\x8e8\x9fr\x91\xf2\xb6\xe5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\\\xdd$\xfe\xb1\xaa\x9b$\x1aQ\xb2\xcc\x8f|\x9d\xedS8\xef\xfe\"\xf1\xb6\xef\xb3-\xf9\xe8c\x9a\x91\xcc\xe1t\xf9=\xa1\x82\x82W\b\xe9@#\xbe\xa8R\xde\xadq\xcak\'I\xce\x8e\xae\a\xd5\"\xc2\xf1\b`\x0fx\x99\xb7c\x8d7*riB\x16V\v\xcf\x00\x00\x00\x00\x00\x00\x00\x00KwI\xef\xd5\xf2\xd4\x82\xf3U\xcf\xd9\x82}\xbc\xa3^u\xb1CR}\xc2U\"\x1e\xd6\xed\xf4T\x85\xf2\x0eD\xe3R\xfb\x84t\xa8\xf6\xa8\xc4', 0xbd, '\xf0d\xb6\x15W^\xf0\x94T3\x180\x94S\f\xd3\xbb\xb6\xee,\xd1p\xf1x\xd8\xe1\xdbS\x9c;\x9b?\x1a\x95\x19N\xc6\xf05\xda\xc9\xf8wY\xfa\xc3b\x9a\xcd\x14\xea\x15\f\x1er\x02\xac\xd6m]\xa3\x83\xea\xf6i\x1bQ\x13\x1d\xed\xf1\x13v\x96\x17J\xaf\x0e\xc8V\xec\x92Q,\xf7\xe9\x94\x8f\x06\xc4\xc8\x9ffb\xf5\xc5\xea\x97b=1\x9b\x9ay\x0e8Fh\x13\x95\xec\xe0N\xd2qe\x130\x16\x0f@9\x84\xe2\xccN\x86\xe70\xd2!%x\xe9\xae\x80\xdf\xd2\nz\xb0\x8b\xab;\xec\xb8\x9c\xaf\x01\x90\x95{\xf1\x84\x00\x00\xeb\x98\xaf\x8c0j\xe4o\x8f\r^E)\x00\x00/\x00\xff\x1b\xd2\xdc\xa6\xb1F\xa7\xcf\xa6\xe4\xe9Z\x00\x00\x00', 0xfa, 'O\x9c;\x11\x9bG&\xa0\xcf;\x107\xc5x\xcfL\xd0\n\tK\xc6\xbd\xdf\x97q\xc8\xe1\xac,\x8eR^\x1bE3\xe5\xe3\xa1\x9fp\vOQuj\xd0\x15*O4\xeb\x16\x1ba\xf6\xcc,\xb8;q\xce\xe2OT\xf3i\xb3\x86d!\x9f-u>lk\xaa=\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1bW\xf4\xfa\x87Q\xbb\x85\xa4\x92r\xe6s\x97,\a\x83\xc7\xe7&\xde\xc2\xb13\xe3\xcc\xb7\xd0\xea0\xf7\xfau\x06\xfaQP\x91\xb7\x16\xd1\xfd\xc0\x1d\xf6Fp\x14-\xc9^\xaf\xbeb\x0ez\xb9\xda&\x16\xddA-\xa5L\xc4[\xb7\xf2j#\xb4\bC\x84&\x00\x00\x00\x00;\x00\x00\x00\x00\x00w@-5\xa7\xb9\xcd\x1eP\xe0\x1a\xba\xa3@\vf_A\xea\xc4\xab\xediAx\x85\xac\xbd\xda\xcaVP\x88\xe1\xb8\x1b\xce\xcam\x91\x9a\xc4\x99u\x88\x8d\xac\x04\x86\xab\xab\xe46\xcf(C\f\xb9\'\xe3e \xc1\xa9\xd2 \xf0<\xde\xfaz\x18\x06\xc6'}, 0x80, '/)\xfaA\xc5\xbe\x03\x00\x83dev/ttyS3\x02\x13d$\x91\xcc\x81a\x89\\\x9aj\xb3\x04\xbb_\xa2]\xc5\xe3o\xd3\xcc>\xe7\xfb0CM\x9dTE\x7fZ~7R5yq\xbdC\xf0K\xb3\x18#\x01\x974hdQYy!\xea\xd1]\x8c\xe6\xd5}\x81\xfc\x00\x00\x00', 0x0, 0xffffffffffffffff}}, 0x4d3) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000980)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7ec5a816d916b2db5b3eb407000000000700"}) r4 = syz_open_pts(r3, 0x0) read(r4, 0x0, 0x2006) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:47 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xb9, 0x75, 0x0, {0xae, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280ecc846b7d1f7fabf9614b34419c2394cac12c3f8cf087045607edf5b5b1d81827247e7ec48d36e808d155fa8568c0de7bc129ed91c21ef6ab6ba061e10bf89b63718ce760a3dbb61032d3575eff8e55f8a0642b282da7cc79bd28b01930abdd6bd6eaa0c7a2ba68a17"}}, 0xb9) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 663.148706][ T5659] hsr_slave_0: left promiscuous mode [ 663.157817][ T5659] hsr_slave_1: left promiscuous mode [ 663.187546][ T5659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 14:12:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000007b80)={0x0, 0x0, &(0x7f0000007b40)={&(0x7f0000007b00)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 663.195574][ T5659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.218503][ T5659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.226220][ T5659] batman_adv: batadv0: Removing interface: batadv_slave_1 14:12:47 executing program 1: r0 = memfd_secret(0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, 0x0) 14:12:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) r2 = io_uring_setup(0x40c7, &(0x7f0000001440)) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x14}}, 0x0) close(r1) close(r2) eventfd2(0x0, 0x0) 14:12:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) dup2(r0, r1) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001d40)={0x14}, 0x14}}, 0x0) [ 663.248321][ T5659] veth1_macvtap: left promiscuous mode [ 663.253964][ T5659] veth0_macvtap: left promiscuous mode [ 663.259669][ T5659] veth1_vlan: left promiscuous mode [ 663.264925][ T5659] veth0_vlan: left promiscuous mode 14:12:47 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x7b, 0x75, 0x0, {0x70, "25f5b12dc45605000000be89fb42c7882f060000000000000072c1a7554b887b0e472b7c32586c4358e4da32457da9f1c1cd82e403c9c7b69cc082d973147e99ce650eb8ab36486a190cd81e6e6c85ceda1cacb3086d99aaedf35de84d69efc715d2f553fdd09b9b1df847dd4fbd590f"}}, 0x7b) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) close(r0) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x8002) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 14:12:47 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x95, 0x75, 0x0, {0x8a, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63986e851b0cb4be35de2edfe3b50591fcb4fab33e"}}, 0x95) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000140)="f615195a77af5cfc13233859a08bd4f0", 0x10) 14:12:47 executing program 0: prlimit64(0x0, 0x3, &(0x7f0000000380), &(0x7f00000003c0)) 14:12:47 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000003d80)='/sys/module/dm_mod', 0x204000, 0x2a) 14:12:47 executing program 1: mount$9p_rdma(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000058c0)={'gretap0\x00', 0x0}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000005fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000009a00), 0x0, 0x0) fchownat(r1, &(0x7f0000009c40)='\x00', 0x0, 0x0, 0x1000) 14:12:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x5451, 0x0) 14:12:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0xfffffffffffffd67, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) r2 = io_uring_setup(0x5b9b, &(0x7f00000003c0)) sendmsg$nl_xfrm(r0, &(0x7f0000001980)={&(0x7f0000001740), 0xc, &(0x7f0000001940)={0x0}}, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) close(r2) 14:12:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 14:12:47 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xa8, 0x75, 0x0, {0x9d, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280ecc846b7d1f7fabf9614b34419c2394cac12c3f8cf087045607edf5b5b1d81827247e7ec48d36e808d155fa8568c0de7bc129ed91c21ef6ab6ba061e10bf89b63718ce760a3dbb61032d3575eff8e55f8a0642b282da7cc7"}}, 0xa8) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:47 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000000)={0x3c, 0x75, 0x0, {0x31, "25f5b12db25605000000be89b81278a78159fa98ba58cb9ed9ab51551560c2e7af617c15d164c1d26e0a9b4d27da08271b"}}, 0x3c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$VT_GETMODE(r3, 0x5409, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:47 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0xa4, 0x75, 0x0, {0x99, "25f5b12db254a6d385c8be89b81278a781e7af607c15f776c1d2da2e53b4a473b8a727790600000046da9d96c8f71429e87332cc0000000000000000d07f18e0af4960993abefb06c42528bd1a4169665afc5b3793a8a7e67b14505e47eb3089f7e64f2c8ed154067f7525cb6047134be2c1ce24789248a5ff9051191dce943956506f3b39ba8d96f674ee9b82392896b5bd51f0586a0efc55"}}, 0xa4) r2 = creat(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) nanosleep(&(0x7f00000002c0)={0x0, r3+10000000}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:47 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0xf2, 0x75, 0x0, {0xe7, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309ec290ef7d1c0f6d03c178e7dd934cf77312873cf98c3825b097b45c0122ca4c141103a77f236df342306dd258be938f39409eaf669b34f95ef646e9ed3a81de101b7c14468cf871c019c864f205a3bf5ed7091d7d162944bb4c948ce4007e0e7745a8efb9721129595d7f8289abc322a77d99a639d2a5c824254a91c1fc2befe190ae956e442902a3e8b9fe8d1986dd0aebb88d61fa8b41b50d84becc4ec8e4038fa6cb39c0d622641a6308c704939dae675e873b9d977a44ec581"}}, 0xf2) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f00000004c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) eventfd(0x0) 14:12:47 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0xde, 0x75, 0x0, {0xd3, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309ec290ef7d1c0f6d03c178e7dd934cf77312873cf98c3825b097b45c0122ca4c141103a77f236df342306dd258be938f39409eaf669b34f95ef646e9ed3a81de101b7c14468cf871c019c864f205a3bf5ed7091d7d162944bb4c948ce4007e0e7745a8efb9721129595d7f8289abc322a77d99a639d2a5c824254a91c1fc2befe190ae956e442902a3e8b9fe8d1986dd0aebb88d61fa8b41b50d84becc4ec8e4038fa6cb39c0d62"}}, 0xde) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 663.625264][ T5659] team0 (unregistering): Port device team_slave_1 removed 14:12:47 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) r1 = dup(r0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) 14:12:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002080)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 14:12:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000a00)={@mcast1, @dev, @private0}) [ 663.666004][ T5659] team0 (unregistering): Port device team_slave_0 removed 14:12:47 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x53, 0x75, 0x0, {0x48, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f497d049fb75f016bcaa604"}}, 0x53) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340), 0xffffff46) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:47 executing program 0: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x40, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0xfffffffffffffe21, 0x2}, 0x10) sendto$inet6(r0, &(0x7f0000000180)="1040ee4eaaadb4d1934c401e5758b6bd8b1bbde136de0324e65c754b5f02f87f227ec07233", 0xfffffffffffffee5, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 14:12:47 executing program 4: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000080), 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 14:12:47 executing program 2: keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000d40), &(0x7f0000000d80)={'enc=', 'oaep', ' hash=', {'rmd128-generic\x00'}}, 0x0, 0x0) 14:12:47 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000003640)={0x14, 0x13, 0xa, 0x101}, 0x14}}, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) 14:12:47 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0xc3, 0x75, 0x0, {0xb8, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d040000000000000000000000000070d4502d3dd15ffbd4d621068bfca19e922fb757988a7eb397c95b3bff648818ff8dc06d780fe410bcde08774e562519f9aafc66889eee22ab92360a5d14933a73756c12452bdb3e7738afaa42e15dd527c4ac380e21c0ca8dfa77493118246139e4239af5255ebdcacdd59f46b4175b5e1ca4518b9161dbb610d7be18bbac2cdcb6c3ff5313d71dc7949c"}}, 0xc3) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RLERROR(r1, 0x0, 0x15) 14:12:47 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0xe46c3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 663.832139][T17349] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.839676][T17349] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.851729][T17349] bridge_slave_1: entered allmulticast mode [ 663.860022][T17349] bridge_slave_1: entered promiscuous mode 14:12:47 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 14:12:47 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x80032, r0, 0x0) 14:12:47 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x80032, r0, 0x0) [ 663.914849][T17349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.933828][T17349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 14:12:47 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r0, r1) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="54000000040801"], 0x54}}, 0x0) 14:12:47 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xd6, 0x75, 0x0, {0xcb, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63986e851b0cb4be35de2edfe3b50591fcb4fab33eb62a9cd3e323f0037587fa02aeaabc0adcf60b3aabafc5faa766166c227cadd6b1a8cbc5cd9cf33d007ccac5f5c26a09d8c73331234f609fd40ec5242202d276fc"}}, 0xd6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:47 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x60, 0x75, 0x0, {0x55, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309ec290ef7d1c0f6d03c178e7dd934cf77312873cf98c3825b097b45c0122ca4c141103a77f236df3423"}}, 0x60) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 663.997926][T17349] team0: Port device team_slave_0 added [ 664.011281][T17349] team0: Port device team_slave_1 added 14:12:47 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="540000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000780)={0x383, 0x7d, 0x0, {{0x0, 0x1c8, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x74, '\x0e\xb3\xcf\xd4BU\xb9\x90\xc4\xc3\xc8]\xaf\xb6\xd2~7\xa6\x8b\xf6\x15\x9d\xa0?*\xcf\xaa\x9c\x10\xe1\x12\xea\x93nyx\x04`=\x8e\xe8\xc3\xdf\x98sF=\xeb\x85O\xe4\xee2\x15\x1a\xac\x97\xeeW\x8f\xbf\x11\xdf\t\xf9\xee\xb7)\xb0wI\x0f\x8c5\xfa\xaa-\xb5\xecK\x9bG\x16\xf8vh\xee$\xc3)\xaf\xb5+n\x1f7\xfc\xaa`Lb\x84\xf1\x0f\xe4\v\n\xf6\xa7\x7fn\\nl\xc5\xc8', 0xe2, 'r&dnoT\x85{\xb5\x1b\t\xa3`L\xc0\xd2\x1c\xa3|\x91\x98g\xc4g;\x0f\x02\xa9\xdf\xcdBv\x14\xc6\xca\xda\xd1\xca\xc9\x87)\xf6\xae\xfa\f4\x7f\x7f#n\xe4Q\'\xfc0$\x03\xca\x7f\xd0\x8e\f\xc6E\x86\xef_\xf6\x8e\x0f=iA\xed\x81\xe7\xd0\xab\\~e\x18=\xa8\x82\xe2m\xba\xa9\xe9\xdd\xd4\xe0\x06\xe8Z\xed\xc9\xf7l\x14c\x9c\x8fT\x84,\xc5\xc4\x1ef\xcf\x96\xbe:,H\xa4\xf7\x94>\'\x10B\xac\"Q+<\x9c\xcb\x8ebD\x9c2\xfd\x12\x1f\xf1\x1d\x9f\xd5\x80\xb7\xc5v\am\x1bzl\xda\xbe\xf2\n!|\x14/\xcc\xa2P\xec\x14\xc2\xa0\xcd\xd5\v\xd0\xb3T\xacm\xc3G\xb4\xae\xd7\xc1f\xcc\xbcs5z\xfaW\xa2\x8a8\xcf\x8c5h$:\xdct\xc1\\3\x83\xdf\xd2\x06\x1c\\.\xdb\x91\x8f\xf8\xf2Kr\xcc\xc1\x7f[mp<\xcam', 0x3, '\x00\x00\x00', 0x3c, '\a\x89\xa8\r^\xc6\xe5\xb74\b\x00\x00\x00\x00\x00\x00\x00\xf6\xab\x9eV\x98/D1\xf9-G\xf2;\xd9\x84\xc28\xfcMp\x90\xb4\xc9\xd0\x14zTe\xc9\x92\xf1\xf5\xf5iB\x00b\xf4\xe5\x99S\x8d\xf9'}, 0x1a6, ';sy\xc1\xfc\xf8!\\p\xc0\xdd\xbd\x9e\xc31\xa5\x00{F\xab\x06T!\xe7\xc3\xe7Z\x94\x1b\xf4\x11(\x14)\xa8\xd0z\xd1X\xe15\xb2\xb6[\x82\xac_q\xd3\xcc\x02\x00\x00\x00\x00\x00\x00\x00r\xb9\x83\x8fw\xcctH\x80\x7f\x1e\xd9\xb1\\\xb4A\xabN[\xcd\x8e\x9a\xfc\xe0\xba\xeb\xf6\xb5\xf8R\xc1\xf3sb\xb8\xd2\xa8P,\xad\x7f\x94P\xcdg\x00\b\x00\x00\x04^\x88\xe9\x18fVl\xa0:\x84\xb6[^\xa7\xafI|\xf2\x8ew\xef\x05\x17]4q,\r\x7f\x857\x1aDF\xce\x1d\xcfF\x87\xc2r|U\xae\x89G\x9e\xef\x7f{\x98\xcbXT/\bee\x0f\x0fY*8\x9d.\'\xcc\xb3\xfc\xf9\xd0r\xf2y*\x8c\x98\x1a\x00#XJ\x0e\xcdqL,\xc5\xeb_\xbd\x90\x0e{D\xc4\xf9\x1c\xae_\xb3\xa5\\q\xb1\\CWM~g\x99\xf4\xbf\xe6\x06\x18\xcf\x1e\x9c\f1s\x1fG\xb0\xc4\x92V\xa8\xb9\x10WV\xe4\xef\xc5\xfc#\x04M&\xc6Z\t\xbc$[\x8e\xeeRX\xa3\x1b\xa5\xf5\xe1c\x90B\xf6c\x1f\x13\x03\x9b\x0eBr7\xa6\xc8k\xe2Zi\x05\"\xad\x00W\xa4\xfel:\xee\x19$3\v\xed\x86\xd3\xff\b\xbfo?\x1eN\x81\a\x89\xc6.`\xcc\x83\xae@\a\xf5\x9d\xcf\x85\xf2F\x9f\x05\xaf\x97\x93\xd5\x89\x96\xd7\x94)E\xfflL\x01\xffMm\x83\x18]a\xe5b\x92\xbf\xc5\xfdW\xeaf\x1c!\x13\xe5\x18\xfd\xf5\xf7\xbcv\xa7U@O/=u\xce\xce\x96fX\xb9\x15\x12\xdf\xb6\xba\xe7\xebx\x18$CK\x14\xc5\xbbU\a\xdak\xd7\x16\xf5P\x8e\x03B\xa7\xd9\x8d\xd8\x8btZ\xa2\x84\xc2\x17\xd0E\n\x8a\xf3', 0xee01}}, 0x383) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_all\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x41) 14:12:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x8010) 14:12:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) dup2(r0, r1) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) [ 664.098429][T17349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.105470][T17349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.132569][T17349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 14:12:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000003040)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x8000) 14:12:48 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 664.162857][T17349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.169965][T17349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.196222][T17349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 14:12:48 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x1a, 0x75, 0x0, {0xf, "25f5b12db254a6d385c8be89b81278"}}, 0x1a) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000340), 0xffffff46) dup3(r4, r3, 0x0) rt_sigreturn() writev(r3, &(0x7f0000000340)=[{&(0x7f00000002c0)="c4", 0x1}], 0x1) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x5614, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) close(r1) write$char_usb(r0, 0x0, 0x0) 14:12:48 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) read$snapshot(r0, &(0x7f0000000040)=""/33, 0x21) 14:12:48 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="540000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x306) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0) write$P9_RLERROR(r1, 0x0, 0xc) 14:12:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) 14:12:48 executing program 2: r0 = perf_event_open(&(0x7f00000028c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tee(r0, 0xffffffffffffffff, 0x0, 0x0) 14:12:48 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x5451, 0x0) [ 664.357443][T17349] hsr_slave_0: entered promiscuous mode [ 664.389199][T17349] hsr_slave_1: entered promiscuous mode 14:12:48 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x0) close(r0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 14:12:48 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) r1 = dup(r0) sendmsg$IPSET_CMD_PROTOCOL(r1, 0x0, 0x80) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000440)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) [ 664.404976][T17349] debugfs: Directory 'hsr0' with parent 'hsr' already present! 14:12:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x40c7, &(0x7f0000001440)) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) close(r0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) 14:12:48 executing program 2: sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0xd8e289b5a4216012) 14:12:48 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x96, 0x75, 0x0, {0x8b, "25f5b147b2eb183aec9e5692d6e8fd89601f9644adc64b35e4b26a8881cea3f71692d7f47262f49051c3d231afd1a75e8ca80c4cd63d18d79ae83e6b1a3403009f634dd06749720111145d451e9b3d82bd2bf4f19f780d14142f4beb2ed1e794106b2caec53a95397d94cb721186ba9811358c69e587edd6078d2d47b189bcf59325662eee345e11caa770"}}, 0x96) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 664.437034][T17349] Cannot create hsr debugfs directory 14:12:48 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) syz_open_dev$evdev(&(0x7f0000001480), 0x1, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000001840)=""/21) 14:12:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000040)) 14:12:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f00000004c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:12:48 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="03"], 0x83) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:48 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigtimedwait(&(0x7f00000003c0), 0x0, 0x0, 0x8) rt_sigreturn() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) 14:12:48 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)) 14:12:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003d00)={0x0, 0x0, &(0x7f0000003cc0)={&(0x7f0000003c40)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x4000000) 14:12:48 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x28, 0x75, 0x0, {0x1d, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a63"}}, 0x28) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)=ANY=[], 0x15) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r7 = dup(r6) write$P9_RSTAT(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB='H'], 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x11, r6, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RLERROR(r4, 0x0, 0x15) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/devlink', 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:48 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x12, 0x75, 0x0, {0x7, "25f5b12db254a6"}}, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000340), 0xffffff46) dup3(r4, r3, 0x0) rt_sigreturn() writev(r3, &(0x7f0000000340)=[{&(0x7f00000002c0)="c4", 0x1}], 0x1) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) 14:12:48 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x2c, 0x75, 0x0, {0x21, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400"}}, 0x2c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0x7, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:48 executing program 4: setrlimit(0x7, &(0x7f0000000040)) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 14:12:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r2 = io_uring_setup(0x104c, &(0x7f0000001440)) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) close(r2) close_range(r1, r0, 0x0) 14:12:48 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) read(r4, 0x0, 0x2006) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000003a80)) r5 = dup(r4) rt_sigreturn() ioctl$RTC_UIE_ON(r5, 0x7003) write$P9_RREAD(r1, &(0x7f0000000980)={0x5f, 0x75, 0x0, {0x54, "1039de23002db6eef7d1b1d9a91790a9de1362da384df24f3d76719dbeaac1d533ad3b59b0529d9758acec47b7b021b23137d604d8a5e7cd4dc7260601685a408cc14a4c3f8f4b7bb9e8a4beacb6f05c47859f9c"}}, 0x5f) 14:12:48 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack_irc', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 14:12:48 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r0, 0x0, &(0x7f0000000400)) 14:12:48 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) memfd_secret(0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) 14:12:48 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/i2c_algo_bit', 0x0, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, 0x0) [ 664.915540][T17349] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 664.930500][T17349] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 664.951685][T17349] netdevsim netdevsim3 netdevsim2: renamed from eth2 14:12:48 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x22, 0x75, 0x0, {0x17, "25f5b12db254a6d385c8be89b81278a781e7d164c1d200"}}, 0x22) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000580), 0xffffff46) r5 = dup3(r4, r3, 0x0) rt_sigreturn() write$P9_RFSYNC(r5, &(0x7f0000000300)={0x7}, 0x7) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x5450, 0x0) [ 664.975262][T17349] netdevsim netdevsim3 netdevsim3: renamed from eth3 14:12:48 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f0000000040)) 14:12:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:12:48 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000080)) 14:12:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x40) 14:12:48 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xac, 0x75, 0x0, {0xa1, "25f5b12da264a6d385c8be89c88483459b8a8fb7e631fcbe609d840a5a0df5af2862ce60a7377ed49dd656494ede7f514117f1fbd0eb98d63a4f3fc5dd131bbfd9069bc999fe6e6907a67d3e42af3cd5fe3776bfcdd5b7b138db58f94e633cf36a9e7e201a373817cd9aa299c0cb999713440ac75f6b91b861ba99e37b6bbeea5300d65d087162b14fc011b1f0e11ccbb1fbba5ae0e224d32a36c6f590524cf6ce"}}, 0xac) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) recvmmsg$unix(r4, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x5618, &(0x7f0000000000)) sendmsg$nl_netfilter(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x11b8}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x160}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) close(r1) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) 14:12:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) r1 = memfd_create(&(0x7f0000000300)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x00:\xa6Ey\xdb\xd1\xa7\xb3S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cRe\x8b\a\x01\x17\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F\x1c/\xbe\xbd\x06\xd0]E\x1b\xdb\x0fR\xb2\xdf\xfe\x13\xdb\xb4\xe4\x91\xee,qp\xef\x843\xdbhf\xe2\x9d\x90`2\xe3\n\x9d\xad\x9b\x92\x8c\'\x17r\x12vw\xaa\xfc\xb7\x1e\x83Yt\x00UF\xcf\x11/H\xaa\xb5o*ph\x89', 0x0) r2 = dup(r1) write$cgroup_pid(r2, &(0x7f0000000080), 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x11, r1, 0x0) sendfile(r1, r2, &(0x7f0000000100), 0x6c03) close(r0) socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 665.126641][T17349] 8021q: adding VLAN 0 to HW filter on device bond0 14:12:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, "ad6ab7481c616a015fc2983a66bd5f4a63560b"}) 14:12:49 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x98, 0x75, 0x0, {0x8d, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d040000000000000000000000000070d4502d3dd15ffbd4d621068bfca19e922fb757988a7eb397c95b3bff648818ff8dc06d780fe410bcde08774e562519f9aafc66889eee22ab92360a5d14933a73756c12452bdb3e7738afaa42e15dd527c4ac380e21c0ca8dfa774931182461"}}, 0x98) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RLERROR(r1, 0x0, 0x15) 14:12:49 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x80585414) [ 665.176024][T17349] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.209960][T10725] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.217090][T10725] bridge0: port 1(bridge_slave_0) entered forwarding state 14:12:49 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x22, 0x75, 0x0, {0x17, "25f5b12db254a6d385c8be89b81278a781e7d164c1d200"}}, 0x22) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:49 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x61, 0x75, 0x0, {0x56, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f497d049fb75f016bcaa6043859189a0484f83b61835272c6c0"}}, 0x61) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000340), 0xffffff46) dup3(r4, r3, 0x0) rt_sigreturn() writev(r3, &(0x7f0000000340)=[{&(0x7f00000002c0)="c4", 0x1}], 0x1) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:49 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x51, 0x75, 0x0, {0x46, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280f9"}}, 0x51) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 665.279068][T10725] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.286197][T10725] bridge0: port 2(bridge_slave_1) entered forwarding state 14:12:49 executing program 4: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000040)="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") r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000040)) 14:12:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000003800)={&(0x7f0000003780)={0x14}, 0x14}}, 0x4000) 14:12:49 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000000)={0x12, 0x75, 0x0, {0x7, "25f5b12db25605"}}, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) dup2(r0, r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 14:12:49 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x85, 0x75, 0x0, {0x7a, "25f5b147b2eb183aec9e5692d6e8fd89601f9644adc64b35e4b26a8881cea3f71692d7f47262f49051c3d231afd1a75e8ca80c4cd63d18d79ae83e6b1a3403009f634dd06749720111145d451e9b3d82bd2bf4f19f780d14142f4beb2ed1e794106b2caec53a95397d94cb721186ba9811358c69e587edd6078d"}}, 0x85) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:49 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x13, 0x75, 0x0, {0x8, "25f5b12db254a6d3"}}, 0x13) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() syz_clone3(&(0x7f0000000000)={0x21101080, &(0x7f0000001900)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) waitid$P_PIDFD(0x3, r3, 0x0, 0xc0000004, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:49 executing program 2: r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:12:49 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x63, 0x75, 0x0, {0x58, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d040000000000000000000000000070d4502d3dd15ffbd4d621068bfca19e922fb757988a7eb397c95b3bff648818ff8dc06d780fe410bcde08"}}, 0x63) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RLERROR(r1, 0x0, 0x15) [ 665.461901][T17349] 8021q: adding VLAN 0 to HW filter on device batadv0 14:12:49 executing program 0: r0 = epoll_create1(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x33fe0}}, 0x0) write$cgroup_netprio_ifpriomap(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14:12:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 14:12:49 executing program 4: r0 = perf_event_open(&(0x7f00000028c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r0, 0x0, 0x0) 14:12:49 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x19, 0x75, 0x0, {0xe, "25f5b12db254a6d385c8be89b812"}}, 0x19) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x33fe0}}, 0x0) write$P9_RSTATu(r3, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000440)={0xffffff73, 0x7, 0x0, {0xc, '/&\xff\x00\x00\x00Y\xcf\x101@/\xaa\v\xba(\\\x8f\xc0\xbcB\x12\x92=s Y\xc9\x83\xd8X\xaa\'\xb1\xa5\xb7\x8a\xde\x96\v\xdc\x05\x9c\x93\xee\xae6+\xbcVub9\xf9\xf7y\xb1`\x87\x86\xe2\x16m\xd4\x1c\x9cr\xbf\xd7\xfc(n\xb9\x00b\"LF\x92K\xc0\x99\x9c\x05\x88\xbe>sn\x9a}[\xea\xed\xf6^\x89H\xa3\x9b\x16\xaf\xa0\xa5\xf1\xb6\xa1\xa2\x986\x8c\x01\xa1\x13\xc2\xd4\x18\x99\x18r\xf6\x19\x81\xf0\x87x\xc8 \xbf\x99\x87\x87l\x00V\x01%\f\f\x8a\xa4\xb9\x11s\x9a\'X\xff\xc2w\x18\\HM:\"\xc5\xcd}$\xc1\xbf\xdc\t\x00\x00\x00\x00\x00\x00\x00l\xe9\xe3\xb9\xf9\x88U\xb5g\x98\xfex\x94a\xf5\xd3\r\xbb\xd7\xce\x8c\x96\xd9\xcfY&\xa6\x82\x12`D\xdd.\x0e\xf9\t6\x87LT\x1ai*o\x84$\xcdG\x13\xadd\x8e\x8a\xcd\xe0\x02`\xff[\xe9\xbb\xcc/\x91\x06\xbc8\xba\xd3Jc\v\x98b\x88\xcd\xbdo\xe2\\\xbc\x05\xd1\xf8<\xf53\xa6=\xf4\xad\x8b\x1c\xdf\xe2\x9e\xe9\xbd\x1c3;\x9amJ\xa0\x192\xbf=u\xf4I\x9a\x8dSY\xd0\xa3\xda!q\xfcXg\b\xcc\xf6Qk\xb8\xc6\x89\"8G\'\xad>2LR\x0f\xc2\xe4n?\xad\xb4?\xbc\xf6\x1a\xa8q[\xd4e\xc85\xaf\xd1y\x9d\xee}P\xbc\xa0o\xd5\xfe\xb1\xdf\xb3\xfeW\xb51\xd4\x1a\xc2\x16\x97\x9a\xc6lN\x9c\x8d{Y\xa2\xfa\xa5,\xbe\x97'}}, 0x10) 14:12:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(r0, r1) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000040)) 14:12:49 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000000c0)={0x43, 0x75, 0x0, {0x38, "b850e64e921fe5005f876f0e6db32a71f600433f0b44b8ac08a5ad2b4223872fb95a3866da939999f3d665e2cd425122e4b3a71541017d84"}}, 0x43) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001140)={0x0, 0x0, 0x0}, &(0x7f0000001180)=0xc) setregid(0xffffffffffffffff, r1) 14:12:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000002840)) 14:12:49 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x2c, 0x75, 0x0, {0x21, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400"}}, 0x2c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:49 executing program 4: pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) 14:12:49 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$assume_authority(0x10, r1) [ 665.685964][T17349] veth0_vlan: entered promiscuous mode 14:12:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RREADLINK(r0, 0x0, 0x0) [ 665.749287][T17349] veth1_vlan: entered promiscuous mode 14:12:49 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000000)={0x1c, 0x75, 0x0, {0x11, "25f5b12db25605000000be89b81278a781"}}, 0x1c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 14:12:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) 14:12:49 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xad, 0x75, 0x0, {0x42, "25f5b12db2d283c759a754a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6f"}}, 0x4d) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x841, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) [ 665.829727][T17349] veth0_macvtap: entered promiscuous mode [ 665.850735][T17349] veth1_macvtap: entered promiscuous mode [ 665.903259][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.913877][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.923817][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.934613][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.944564][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.955128][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.965073][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.975598][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.985940][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:12:49 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x42, 0x75, 0x0, {0x37, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7da2e53b47eb8"}}, 0x42) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r4 = syz_open_pts(r3, 0x0) read(r4, 0x0, 0x2006) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:49 executing program 0: r0 = creat(&(0x7f0000000cc0)='./file0\x00', 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x0) 14:12:49 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x86, 0x75, 0x0, {0x7b, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7da2e53b47eb85867e370e17f497d040e7d71c16c37de553fe53e45dacb20563021138d522befde963256be8e59da8217957a7f9ec71fc9fa3b7f39c97cac80455cc9b4cb9b0000c0609c"}}, 0x86) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:49 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xab, 0x75, 0x0, {0xa0, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63986e851b0cb4be35de2edfe3b50591fcb4fab33eb62a9cd3e323f0037587fa02aeaabc0adcf60b3aabaf"}}, 0xab) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 665.996553][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.006554][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.017046][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.027188][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.037926][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:12:49 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) 14:12:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x14}, 0x14}}, 0x44414) [ 666.047820][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.058317][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.068208][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.078731][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.088780][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:12:49 executing program 4: r0 = io_uring_setup(0x1e27, &(0x7f0000000000)) r1 = dup(r0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 14:12:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) [ 666.099349][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.109724][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.120740][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.130633][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.141339][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:12:50 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x48c0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) [ 666.151282][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.161774][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.171667][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.182224][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.192244][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:12:50 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000000)={0x14, 0x75, 0x0, {0x9, "25f5b12db256050000"}}, 0x14) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:50 executing program 4: r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000080)) [ 666.202884][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.212965][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.223676][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.233560][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.244128][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.254029][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.264516][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.274534][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.285048][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:12:50 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xce, 0x75, 0x0, {0xc3, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63986e851b0cb4be35de2edfe3b50591fcb4fab33eb62a9cd3e323f0037587fa02aeaabc0adcf60b3aabafc5faa766166c227cadd6b1a8cbc5cd9cf33d007ccac5f5c26a09d8c73331234f609fd4"}}, 0xce) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}}, 0x0) close(r1) memfd_secret(0x0) 14:12:50 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4000000a, 0x0) rt_sigreturn() rt_sigtimedwait(&(0x7f00000001c0), 0x0, 0x0, 0x8) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) [ 666.294966][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.305486][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.315454][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.326014][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.336248][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:12:50 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000180), 0x0, 0x0, 0x0) [ 666.347167][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.357375][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.368517][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.378517][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.389009][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:12:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14}, 0x14}}, 0x4000) 14:12:50 executing program 1: r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000200)) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, 0x0) [ 666.398903][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.409667][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.419613][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.430259][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.440409][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.451160][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.461165][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.471703][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.481626][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.492208][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:12:50 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5451, 0x0) [ 666.502246][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.512805][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.522809][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.533647][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.543798][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:12:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14}, 0x14}}, 0x800) 14:12:50 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xb}, 0xb) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 666.554344][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.564358][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.575321][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.585262][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.595877][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:12:50 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000480), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x541b, &(0x7f0000000180)) [ 666.605773][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.616302][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.626232][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.636834][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:12:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x4d19, &(0x7f0000000000)) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) close(r1) 14:12:50 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x48c0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10}, 0x10}}, 0x0) [ 666.646728][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.657428][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.672467][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.683398][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.693271][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:12:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x60002) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001480)={0x1, 0x0, 0x3, "e9"}) r1 = dup(r0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, 0x0) [ 666.703824][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.713685][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.724164][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.734020][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.744600][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:12:50 executing program 0: r0 = syz_io_uring_setup(0x4e6e, &(0x7f0000000000)={0x0, 0x4480}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000100)="a7", 0x1) 14:12:50 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14}, 0x14}}, 0x0) [ 666.755392][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.766047][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.775990][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.786609][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.796511][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.807002][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.817236][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.827718][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.837612][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:12:50 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0c5ba733c78a9d45ef9052da26b4f2c00bea6b"}) [ 666.848245][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.858088][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.868667][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.878525][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.889036][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:12:50 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000009bb587"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r0) 14:12:50 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATu(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="8c"], 0x48c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 666.899127][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.909660][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.919593][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.930436][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.940306][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:12:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) [ 666.951366][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.961254][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.971809][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.981673][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.992212][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:12:50 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x30, 0x75, 0x0, {0x25, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a"}}, 0x30) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 667.002273][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.012752][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.037998][T17349] batman_adv: batadv0: Interface activated: batadv_slave_0 14:12:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x5452, &(0x7f0000000440)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) [ 667.049792][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.060327][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.070324][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.080999][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.090926][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:12:50 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x7e, 0x75, 0x0, {0x73, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309ec290ef7d1c0f6d03c178e7dd934cf77312873cf98c3825b097b45c0122ca4c141103a77f236df342306dd258be938f39409eaf669b34f95ef646e9ed3a81de101b7c14468cf87"}}, 0x7e) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 667.101446][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.111552][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.122062][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.132268][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.142783][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:12:51 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigtimedwait(&(0x7f00000003c0), 0x0, 0x0, 0x8) rt_sigreturn() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x28}}, 0x0) [ 667.152808][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.163316][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.173178][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.183653][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.193583][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:12:51 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x7d, 0x75, 0x0, {0x72, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309ec290ef7d1c0f6d03c178e7dd934cf77312873cf98c3825b097b45c0122ca4c141103a77f236df342306dd258be938f39409eaf669b34f95ef646e9ed3a81de101b7c14468cf"}}, 0x7d) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:51 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x5c, 0x75, 0x0, {0x51, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280f9c846b7d1f7fabf9614b344"}}, 0x5c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) write$P9_RLERROR(r1, 0x0, 0x15) [ 667.204096][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.213960][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.224890][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.234778][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.245241][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.255295][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.265994][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.275869][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.286428][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.296313][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:12:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='wchan\x00') dup2(r0, r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 14:12:51 executing program 4: r0 = memfd_secret(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) [ 667.306809][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.316748][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.327222][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.337462][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.347973][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:12:51 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x5451, 0x0) [ 667.357871][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.368358][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.378192][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.389120][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.399279][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:12:51 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0xb6, 0x75, 0x0, {0xab, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d040000000000000000000000000070d4502d3dd15ffbd4d621068bfca19e922fb757988a7eb397c95b3bff648818ff8dc06d780fe410bcde08774e562519f9aafc66889eee22ab92360a5d14933a73756c12452bdb3e7738afaa42e15dd527c4ac380e21c0ca8dfa77493118246139e4239af5255ebdcacdd59f46b4175b5e1ca4518b9161dbb610d7be18bb"}}, 0xb6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RLERROR(r1, 0x0, 0x15) [ 667.409753][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.419654][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.430162][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.440020][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.450509][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:12:51 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') close_range(r3, 0xffffffffffffffff, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7}, 0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) write$P9_RLERROR(r1, &(0x7f00000000c0)=ANY=[], 0x15) 14:12:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000004480)={&(0x7f00000030c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 667.460608][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.471227][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.481277][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.491884][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:12:51 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) r2 = io_uring_setup(0x3327, &(0x7f0000001440)) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) rt_sigreturn() openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) close(r0) creat(0x0, 0x0) r3 = openat$ttyS3(0xffffff9c, &(0x7f0000002240), 0x0, 0x0) ioctl$KDGKBENT(r3, 0x5409, 0x0) [ 667.505437][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.515924][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.525800][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.536297][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.546406][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:12:51 executing program 0: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x1) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000001800)) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000020c0)={0x0, 0xfffffffffffffffb, 0x0, 0x3b, @buffer={0x0, 0xfe, &(0x7f0000001e00)=""/254}, 0x0, &(0x7f0000002000)=""/107, 0x1, 0x3, 0x3, 0x0}) r1 = syz_open_dev$sg(&(0x7f0000002140), 0x0, 0x10002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000002180)) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f00000021c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000002200)={0x17, 0x4, 0x0, "42b3c4e9b7416bc4c7d98a4a0e24868c6bf2f80a196c88"}) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r2 = syz_open_dev$sg(&(0x7f00000027c0), 0x0, 0x0) ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000002880)={'\x00', 0x0, 0x9fa, 0x5}) 14:12:51 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x5a, 0x75, 0x0, {0x4f, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f497d049fb75f016bcaa6043859189a0484f8"}}, 0x5a) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 667.557061][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.566951][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.577482][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.587378][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.597882][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.608196][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.618701][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.628570][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.639107][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.649130][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:12:51 executing program 1: pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 14:12:51 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x98, 0x75, 0x0, {0x8d, "25f5b12da264a6d385c8be89c88483459b8a8fb7e631fcbe609d840a5a0df5af2862ce60a7377ed49dd656494ede7f514117f1fbd0eb98d63a4f3fc5dd131bbfd9069bc999fe6e6907a67d3e42af3cd5fe3776bfcdd5b7b138db58f94e633cf36a9e7e201a373817cd9aa299c0cb999713440ac75f6b91b861ba99e37b6bbeea5300d65d087162b14fc011b1f0"}}, 0x98) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) recvmmsg$unix(r4, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 667.659759][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.669631][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.680131][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.690655][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.701217][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:12:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000c80), r0) [ 667.711138][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.721629][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.731504][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.742300][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:12:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000014c0)={0x14}, 0x14}}, 0x2000c890) [ 667.752215][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.762804][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.772750][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.783244][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.793290][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:12:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f00000004c0)=0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) close(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 667.804034][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.813901][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.824402][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.834278][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.844815][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:12:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001a80), r2) 14:12:51 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="540000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000780)={0x338, 0x7d, 0x0, {{0x0, 0x25f, 0x0, 0x0, {}, 0x0, 0x0, 0xfffffffd, 0x0, 0x69, '\x0e\xb3\xcf\xd4BU\xb9\x90\xc4\xc3\xc8]\xaf\xb6\xd2~7\xa6\x8b\xf6\x15\x9d\xa0?*\xcf\xaa=\x8e\xe8\xc3\xdf\x98sF=\xeb\x85O\xe4\xee2\x15\x1a\xac\x97\xeeW\x8f\xbf\x11\xdf\t\xf9\xee\xb7)\xb0wI\x0f\x8c5\xfa\xaa-\xb5\xecK\x9bG\x16\xf8vh\xee$\xc3)\xaf\xb5+n\x1f7\xfc\xaa`Lb\x84\xf1\x0f\xe4\v\n\xf6\xa7\x7fn\\nl\xc5\xc8', 0xe2, 'r&dnoT\x85{\xb5\x1b\t\xa3`L\xc0\xd2\x1c\xa3|\x91\x98g\xc4g;\x0f\x02\xa9\xdf\xcdBv\x14\xc6\xca\xda\xd1\xca\xc9\x87)\xf6\xae\xfa\f4\x7f\x7f#n\xe4Q\'\xfc0$\x03\xca\x7f\xd0\x8e\f\xc6E\x86\xef_\xf6\x8e\x0f=iA\xed\x81\xe7\xd0\xab\\~e\x18=\xa8\x82\xe2m\xba\xa9\xe9\xdd\xd4\xe0\x06\xe8Z\xed\xc9\xf7l\x14c\x9c\x8fT\x84,\xc5\xc4\x1ef\xcf\x96\xbe:,H\xa4\xf7\x94>\'\x10B\xac\"Q+<\x9c\xcb\x8ebD\x9c2\xfd\x12\x1f\xf1\x1d\x9f\xd5\x80\xb7\xc5v\am\x1bzl\xda\xbe\xf2\n!|\x14/\xcc\xa2P\xec\x14\xc2\xa0\xcd\xd5\v\xd0\xb3T\xacm\xc3G\xb4\xae\xd7\xc1f\xcc\xbcs5z\xfaW\xa2\x8a8\xcf\x8c5h$:\xdct\xc1\\3\x83\xdf\xd2\x06\x1c\\.\xdb\x91\x8f\xf8\xf2Kr\xcc\xc1\x7f[mp<\xcam', 0xa5, '\x00\x00\x00\xf0\xb5\xfbbP\\$\x9dj\xee\xc3X\x19\xbf\xca\xe0\xf7{1\x9b\xaedW\xdf\x95p\xea?wv\x87w\xc6\xbf\x13\xa2w\x10\x88\x1a\xe0,\xb3\xae\x97f\x10\xa7{\xf8|k\x13\xb8\x9b\x99\xb9\xea\xbbNK\x83\xa11\xdb\x86\x7f\x05\x94?*\x8c\xd4\xfc=\xa2\xd4\xc0H\xe3\xec?&M\xcb\xc3\x9b\xa4E\xdc<\x80\xaa\xc5\xed\x8a\x15\xa8\xa17-\xc4\x9a=\x82~\xf4|V\xa7\xe3 k}\x8f\xda\x97\x84\x06n\xacQ\x17\x04\x8d\xeb\x8f\xcd\xfc\xe1>\x94\xbf\xf1$*(\xa2UwP5g?T\xba\x81\xfa\x94f\x81~\x10W\xbb\xceHw\x9fw\xfa\xf4', 0x3c, '\a\x89\xa8\r^\xc6\xe5\xb74\b\x00\x00\x00\x00\x00\x00\x00\xf6\xab\x9eV\x98/D1\xf9-G\xf2;\xd9\x84\xc28\xfcMp\x90\xb4\xc9\xd0\x14zTe\xc9\x92\xf1\xf5\xf5iB\x00b\xf4\xe5\x99S\x8d\xf9'}, 0xc4, '/sy\xc1\xfc\xf8!\\p\xc0\xdd\xbd\x9e\xc31\xa5\x00{F\xab\x06T!\xe7\xc3\xe7Z\x94\x1b\xf4\x11(\x14)\xa8\xd0z\xd1X\xe15\xb2\xb6[\x82\xac_q\xd3\xcc\x02\x00\x00\x00\x00\x00\x00\x00r\xb9\x83\x8fw\xcctH\x80\x7f\x1e\xd9\xb1\\\xb4A\xabN[\xcd\x8e\x9a\xfc\xe0\xba\xeb\xf6\xb5\xf8R\xc1\xf3sb\xb8\xd2\xa8P,\xad\x7f\x94P\xcdgM\xfa)w\x04^\x88\xe9\x18fVl\xa0:\x84\xb6[\x17]4q,\r\x7f\x857\x1aDF\xce\x1d\xcfF\x87\xc2r|U\xae\x89G\x9e\xef\x7f{\x98\xcbXT/\bee\x0f\x0fY*8\x9d.\'\xcc\xb3\xfc\xf9\xd0r\xf2y*\x8c\x98\x1a\x00#XJ\x0e\xcdqL,\xc5\xd7\xf7\x9e;f\xbb\xf8\xfe\xcd\xd5'}}, 0x338) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() rt_sigsuspend(&(0x7f00000000c0), 0x8) write$P9_RLERROR(r1, 0x0, 0x15) [ 667.854882][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.865475][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.875498][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.886274][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.896225][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:12:51 executing program 4: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x800c0, 0x0) [ 667.907066][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.917143][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.927667][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.937546][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.948032][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:12:51 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigreturn() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:12:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r2, &(0x7f0000000400)={0x76, 0x75, 0x0, {0x6b, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280ecc846b7d1f7fabf9614b34419c2394cac12c3f8cf087045607edf5b5b1d81827247e7ec48d3"}}, 0x76) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) rt_sigreturn() recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$P9_RLERROR(r2, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 667.958308][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.969002][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.979301][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.989798][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.000094][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:12:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}}, 0x90) [ 668.010575][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.020538][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.031446][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.041314][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.051818][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.061708][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.072447][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.082354][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.092893][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.102769][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:12:51 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0x2a, 0x75, 0x0, {0x1f, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82"}}, 0x2a) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() poll(0x0, 0x0, 0x1ff) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f00000000c0)) [ 668.113761][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.123819][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.134298][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.144178][T17349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:12:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setownex(r0, 0xf, &(0x7f0000003bc0)) [ 668.154678][T17349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:12:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x104f, &(0x7f0000001440)) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) close(r0) signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) close(r1) 14:12:52 executing program 2: r0 = open$dir(&(0x7f0000000840)='./file0\x00', 0x101a40, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000980)={0x0, 0x2}) [ 668.185046][T17349] batman_adv: batadv0: Interface activated: batadv_slave_1 14:12:52 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f00000006c0)={0x1f3, 0x7d, 0x0, {{0x0, 0x164, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf0, '\x00\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x02\x01X!\x04\xe1[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0[\xd2;S*\xfc\xb1\xc9Q\f\xca\xd8\xda\x19\xf5\xcf\x13\x11\xd1\b\x90>\xa3\xf6\xb4\x1b\xaf\x9e\xdbM\x17@\x8e\xb9\xb2J\xec\xb1\x99\x95m\r\xe8\xb5\xf2{\'\x11+gUf\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xfem\x1d0aU=\x1eE\xe9w\x1f\xc8j<^\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xd6\xf1\xb3\xe3\xffc\xd5\xb4\xe6K\xcc~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee;/\xf6\x9f\xcb\x8ac#\xa2\xf7\xe6\x19\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80-\xe3:\xe0$', 0xffffffffffffff18, '\xf1\x96\xc94\xaf=v^\x98\xd7\x13\xdb-', 0x2b, '\x00\x8f\t1\xe17\xfd\x00\x00\x00\x00\x00\x00?\xbd\x04\x00\x00\x00\rK\xba\x8f\xd2*Tj\x12\xad\xf1D\x83_\xf9O_\xd0\xeesd\x00\x00\x00', 0x9, 'trans=fd\x05'}, 0x7a, '\xea\x17\xaag\xa0\xe9@\xbd\n\xfc\x01}\xff\x16H\x99;/vo\'\x86\v\xaf\x16\xdb\xba\xee$z\x85K\x17\f\xeb\x8a\b\xd2\xea\xa0\r\x00\x00\x00\x00\x00\x001\x05x\xf7\xea\xfbw\xcaw\aL\x88v\xcb}\xa0\x90\xe7f\x9c\t \"\t\xbeN\x94\x12\xe8\x9f\xfcb\xba&r\x12y=\x7f\x80D\xb3*Dbu\x9f&Z\xff\xf6\x02l\xa4\xb2K?\b\x1b\x91\xb4\x98\xf0\xc3\xb7\x8b\xb2\xd3\x0e\xe4\fv\xdaE\x95'}}, 0x1f3) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = memfd_secret(0x0) close_range(r2, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:52 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x36, 0x75, 0x0, {0x2b, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400"/43}}, 0x36) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:52 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x4d, 0x75, 0x0, {0x42, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309ec290ef7d1c0f6d03c178e7dd934cf77312873cf98c3"}}, 0x4d) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 668.249069][T17349] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.257849][T17349] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.266738][T17349] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.275883][T17349] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 14:12:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xfffffffffffffe01, &(0x7f0000000140)={&(0x7f0000000500)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 14:12:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x48c0, 0x0) 14:12:52 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc}}}}, 0x28}}, 0x0) 14:12:52 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x7f, 0x75, 0x0, {0x74, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280f9c846b7d1f7fabf9614b34419c2394cac12c3f8cf087045607edf5b5b1d81827247e7ec48d32e8040d0ff676cc0eb"}}, 0x7f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x53, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 14:12:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x420}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) 14:12:52 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000001b80)='./file0\x00', 0x1000) 14:12:52 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x45, 0x75, 0x0, {0x3a, "25f5b12db254a6227ff0e55d8c2ea55180e463e354b0c498fb7e0e8fc1ba3afd9e4d7ee912ce4bac54e2dbfe2ac2b755af4552ffecfe8b621d1b"}}, 0x45) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x2e, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) write$P9_RWRITE(r3, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001480)={0x1, 0x0, 0x3, "e9"}) r1 = dup(r0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) 14:12:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/power', 0x0, 0x0) dup3(r0, r1, 0x0) write$eventfd(r1, &(0x7f0000000000), 0x8) 14:12:52 executing program 1: r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r3 = pidfd_getfd(r1, r2, 0x0) futimesat(r3, 0x0, 0x0) 14:12:52 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x7ff, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000001180)) 14:12:52 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10d040, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000bc0), 0x0, 0x0, 0x0) 14:12:52 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x14, 0x75, 0x0, {0x9, "25f5b12db254a6d385"}}, 0x14) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:52 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000380)={0x0}}, 0x0) 14:12:52 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40040, 0x60) 14:12:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x50) 14:12:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x420}, 0x420}}, 0x0) 14:12:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) recvmsg$inet_nvme(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet_nvme_icreq_pdu(r3, &(0x7f0000000000), 0x80, 0x0, 0x0, 0x0) 14:12:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0x40040) 14:12:52 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100)) 14:12:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) write$P9_ROPEN(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) 14:12:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28240, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)) 14:12:52 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x2f, 0x75, 0x0, {0x24, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e824a0aad78ef"}}, 0x2f) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5', 0x6) fallocate(r3, 0x0, 0x0, 0x400001) fcntl$addseals(r3, 0x409, 0x8) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000740)={0x14}, 0x14}}, 0x8000) 14:12:52 executing program 0: r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") syz_open_dev$MSR(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) 14:12:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14}, 0x14}}, 0x10) 14:12:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0xb8eee940bd61a227}, 0x14}}, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0}, 0x0) dup3(r0, r1, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0xc0}}, 0x0) 14:12:52 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0x28, 0x75, 0x0, {0x1d, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a63"}}, 0x28) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() poll(0x0, 0x0, 0x1ff) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:52 executing program 0: r0 = creat(&(0x7f0000002680)='./file0\x00', 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002d00), 0x0, 0x0) dup2(r0, r1) write$P9_RLERROR(r1, &(0x7f0000000380)=ANY=[], 0x9) 14:12:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000002b40), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = dup(r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) dup2(r5, r2) recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 14:12:52 executing program 3: r0 = fsopen(&(0x7f0000000080)='msdos\x00', 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000400)) 14:12:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:12:52 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000500)={0x7e, 0x75, 0x0, {0x73, "25f5b12db254a6d3857ac4b4f91265a781e7af607c00000005006e0a630e82f982e03a062a296352467f3395ad75b1ad1257d1e84657ddeba5efc62c9a9826e17d295c844d7211124be3ee8e52965a50f21d0329bee47c02faf01c567d5c393d825a4b1d012a0f446e1b0d5cfb10ab41cf5e7b"}}, 0x7e) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:52 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14}, 0x14}}, 0x0) 14:12:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x5451, 0x0) 14:12:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x33fe0}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x44) 14:12:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddb3a89047bfffff00"}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) close(r1) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2006) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 14:12:52 executing program 4: r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000500)) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000140)) 14:12:52 executing program 2: capset(&(0x7f0000001200)={0x19980330}, &(0x7f0000001240)) socket(0x2, 0x3, 0x5) 14:12:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x7) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 14:12:52 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/route\x00') close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 14:12:52 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x5451, 0x0) 14:12:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack_irc', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, 0x0, 0x0) 14:12:52 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000680)={0x142, 0x75, 0x0, {0x137, "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"}}, 0x142) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 14:12:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) 14:12:53 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r1, r0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 14:12:53 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x15) 14:12:53 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x48c0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup2(r1, r0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x5452, &(0x7f0000000040)={@private2}) 14:12:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) 14:12:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) execve(0x0, 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 14:12:53 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 14:12:53 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r1, 0x0) 14:12:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, 0x0) 14:12:53 executing program 2: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x6a) openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file2\x00', 0x0, 0x16) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 14:12:53 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x3f7, 0x0, 0x0, 0x0, {0x7, 0x7, './file0', './file0'}}, 0x28}}, 0x800) 14:12:53 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x5451, 0x0) 14:12:53 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x3c, 0x75, 0x0, {0x31, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7"}}, 0x3c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$AUDIT_USER_TTY(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:53 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0x5451, 0x0) getpid() syz_pidfd_open(0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f00000004c0)={0x3ee, 0x7d, 0x0, {{0x0, 0x35e, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x158, '\x00\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x02\x01X!\x04\xe1[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0[\xd2;S*\xfc\xb1\xc9Q\f\xca\xd8\xda\x19\xf5\xcf\x13\x11\xd1\b\x90>\xa3\xf6\xb4\x1b\xaf\x9e\xdbM\x17@\x8e\xb9\xb2J\xec\xb1\x99\x95m\r\xe8\xb5\xf2{\'\x11+gUf\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xfem\x1d0aU=\x1eE\xe9w\x1f\xc8j<^\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xd6\xf1\xb3\xe3\xffc\xd5\xb4\xe6K\xcc~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee;/\xf6\x9f\xcb\x8ac#\xa2\xf7\xe6\x19\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80-\xe3:\xe0$p\xb0\xf5\xaa\x98\xbf\x03\n\x1a\x82J\xf6Z\xa6\xc3\xc6\x144\f\xc2\xfdR\x87cp\xe0\x15\xfc-\xef\x82\xa0\xb7\x1d\td\x1d\xe9\x9c\xe1\xadU\x1c\xbc\xe1L\xee\x8b,\xfcm\x8c\x81\xa7\x17W\x04\xd2\x89W\'*\x10(\x1bS\x11\x80\x1e+Dw\xed\xe0\xd7a\x9dz(U3\x9b\xcf\xde\x03\xe6 b\xd8\xab-\xfc\x00\xff\x04b\xb8\xe3\xcd\xea\xd9\x0e\x01\x95', 0x3f, '\xdb-\x85K\xf8\x974^(&\x00\x00\x00\x14\x951\x96|\x13\x96z\xc3\xca\xae\x84\x83\xbdL\x98*\fp\x84_\x92C\f\x04\x9f\fZ\xf1\xafG\x05\b\xc6\x93\x13\xc8\xe1\x7fr\xef`~j\xd8\xb5\x14:\xa1\xa9', 0x18b, 'U\x0f0QM\xce\x92\xee\xa5\xf5\xa9U\x92@\x13\x94\x84\r\xaaO\b\xafV\xf2\xb2:h\x80\x00;\xb1s\x7f\x8e\xa8\xac\xedI\x12\xd2\xb5\x7f7A\x159\x8d/A\x88\x97G\xee\x11\xc8\x12\x7fE\xeb\xbc\xd9\x99\xc5\xc2\xcb\a\xc8\x1e/\b\xe0.\xeb\xee\xbf\xa6>\xf3n\xb2\x97\xdf#d\xdc\x9e\xb5\x9f\xafj\xe0\x8bK\v*a\xda\xa2\xea\x81\xf4\xac\xc9\x19\xec\xe1@\x92\xa0\x9c3\t\x9a\x97c\xfa+(\xed\xd6v\xb1\x125\xeb\xc9#\xad^\xe6~\xefL\r\x87B\xb29\x06\x15\x84g\xaa\x8fm\x97\xcc-\x0f\voYIX\x92>\xea\xf1\x8d}\x8d:\x7f.\xef\vV\xa6\xe6D\xab\xc3\xbd\xed\xf4\xc3\x11\xce\xfc\x02\xa8a\x95\x7f\x04\x81_\x97a\xfd\x90\x1eI\xae\x962>\xb0\xb2k\xac \x8e\xddV\xbe\xce:\xd1\xe7\v\xdd\x8a\x0e\xc8v\xe4F\xcf\xf6\x11\xd3\xf9\xa2o\xef\x86\xda#\xefS)7\x01\xf9g\xb0?U\xa1\xaa\x84\x12\xce\x11em\xc0\xb1\"\xe5\xe5\xb5\xa7Wd\x01\xac\xf8\x97n\xa5v,_\x831\xb3\x05\xf2d\xf7\xa5\x80\xab\xdf\xd5\x06r\xee\x14:\xe44\xa8\x8d\xf8\xdb:\x17\xe4\xbc\x8f\x8d\r\\\xceId\xec\xce\x93_78I\xb6pf\x03f8-\x18!!\\\xdf\x01\x04\xa6\x14\xc4\x1c\xffY\v\xc3\x9eg\"\x10q\xab\x9d\xc8Y\x1fp\xd0D\x18\xf3\xcb\xc9I\xe6\xe4*x\xf4(\xc1TWJ\xb0\xcb\xd1F\x97\x8eQy\xf3B\xd7slA0\xe1\xe8\x80\xb9\xac3t\x8c\xe4\x03{Q\xaf\x8f\x00\x06?\x1cT\xc6y\xfd\xe2\x98', 0x9, 'trans=fd\x05'}, 0x7b, '\xea\x17\xaag\xa0\xe9@\xbd\n\xfc\x01}\xff\x16H\x99;/vo\'\x86\v\xaf\x16\xdb\xba\xee$z\x85K\x17\f?\x8a\b\xd2\xea\xa0\r\x00\x00\x00\x00\x00\x001\x05x\xf7\xea\xfbw\xcaw\aL\x88v\xcb\x9c\xa0\x90\xe7f\x00\x01\x00\x00\x00\x00\x00\x00\x12\xe8\x9f\xf8b\xba&r\x12y=\x7f\x80D\xb3*Dbu\x9f&Z\xff\xf6\x02l\xa4\xb2K?\b0\x91\xb4\x98\xf0\xc3\x1a\xcdmKn\xdai\x84\x9a\x9b\x19\xd0', 0xee00}}, 0x3ee) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x208003, &(0x7f0000000540), 0x1, 0x24f, &(0x7f00000002c0)="$eJzs3U1oFGcYB/BnZnfzuZS0vRQKbaGU0gZCeiv0kl5aCJRQeii0QkTEi5IIMcHbricvHvSskpOXIN6MHiWX4EURPEXNIV4EDR4MHvSwsl8SccGQTXY08/vBZDKz887zDjP/d2YPwwaQWyMRMRERhYgYjYhSRCTbN/iuOY20FhcHV6cjarV/nieN7ZrLTe12wxFRjYhfI2IlTeJ4MWJh+f+Nl2t//nhuvvTDleX/Bnt6kC2bG+t/bV2eOnt98peFu/efTiUxEeV3jmvvJR3WFZOIL/aj2EciKWbdA3bi79PXHtRz/2VEfN/IfynSaJ6883N9K6X4+VLnlrXKhWf3vu5tb4G9VquV6vfAag3InTQiyq2H1Mb/kaZjY81n+IeFofTE7Nyp0WOz8zNHsx6pgD1S//69/sfN/hvDjcwn6Vgr/08KzfwDB1WlNV96VP+7Vci2N0BvlSPWRw9Xfgr5h9yRf8ivVv4HQv7h09W3u2bu/5Bf8g/5Jf+QX/IP+SX/kF/yD/kl/5Bf2/MPAORLrX+HLwpX2w2AgyLj4QcAAAAAAAAAAAAAAAAAAOhgcXB1uj3tw+4HOq28fTFi8/eIKHaqX2j8HnG76dCLpL7ZW0mzWVcOfdvlDrp0NeO3rz97nG39O99kW78yE1E9ExHjxeL711/Suv527/MPfF460mWBLv32b7b1Xy9lW39yLeJWffwZ7zT+pPFVY955/CnXz1+X9U++6nIHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9MybAAAA//9RD2XY") lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 14:12:53 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x40, 0x75, 0x0, {0x35, "25f5b12db254a6227ff0e55d8c2ea55180e463e354b0c498fb7e0e8fc1ba3afd9e4d7ee912ce4bac54e2dbfe2ac2b755af4552ffec"}}, 0x40) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x2e, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) write$P9_RWRITE(r3, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) rt_sigreturn() pause() 14:12:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 14:12:53 executing program 4: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x121040e, &(0x7f0000000400)=ANY=[], 0x0, 0x69d, &(0x7f0000000980)="$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") ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r0) 14:12:53 executing program 2: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x5451, 0x0) 14:12:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x2000c010) 14:12:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cpuacct.usage_all\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 14:12:53 executing program 1: r0 = io_uring_setup(0x5845, &(0x7f0000000100)) ioctl$EXT4_IOC_SETFSUUID(r0, 0x5451, 0x0) 14:12:53 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x5d, 0x75, 0x0, {0x52, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309ec290ef7d1c0f6d03c178e7dd934cf77312873cf98c3825b097b45c0122ca4c141103a77f236"}}, 0x5d) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:53 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = dup(r0) r2 = dup3(r0, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000000c0)={{0x80}, 'port0\x00'}) 14:12:53 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x58, 0x75, 0x0, {0x4d, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280ecc846b7d1f7fabf"}}, 0x58) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r4 = dup(r3) write$cgroup_pid(r4, &(0x7f0000000080), 0x39) sendfile(r3, r4, &(0x7f0000000100), 0x100000000006c03) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCOUTQNSD(r0, 0x5421, &(0x7f0000000000)) 14:12:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={0x0}}, 0x4009) 14:12:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup3(r0, r1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000000540)) 14:12:53 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000)={'veth1_to_team'}, 0x10) 14:12:53 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x3e, 0x75, 0x0, {0x33, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7da2e"}}, 0x3e) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:53 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000280)) 14:12:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) r2 = fcntl$dupfd(r1, 0x0, r0) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = gettid() tkill(r3, 0x14) 14:12:53 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x73, 0x75, 0x0, {0x68, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d040000000000000000000000000070d4502d3dd15ffbd4d621068bfca19e922fb757988a7eb397c95b3bff648818ff8dc06d780fe410bcde08774e562519f9aafc66889eee22ab9236"}}, 0x73) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RLERROR(r1, 0x0, 0x15) 14:12:53 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000740)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003780), r0) syz_genetlink_get_family_id$tipc(&(0x7f0000003900), r0) 14:12:53 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x8b, 0x75, 0x0, {0x80, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63986e851b0cb4be35de2e"}}, 0x8b) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) write$tcp_congestion(r3, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:53 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x38, 0x75, 0x0, {0x2d, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400"/45}}, 0x38) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:53 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0) write$P9_RLERROR(r1, 0x0, 0x15) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 14:12:53 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) flistxattr(r0, 0x0, 0x0) 14:12:53 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x48, 0x75, 0x0, {0x3d, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa"}}, 0x48) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x0) 14:12:53 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read(r0, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x80045300, 0x0) 14:12:53 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x65, 0x75, 0x0, {0x5a, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f497d049fb75f016bcaa6043859189a0484f83b61835272c6c0b9067c03"}}, 0x65) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340), 0xffffff46) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:53 executing program 0: r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001f80)='./file1\x00', &(0x7f0000001fc0)={0x40}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) 14:12:53 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x92, 0x75, 0x0, {0x87, "25f5b12da264a6d385c8be89c88483459b8a8fb7e631fcbe609d840a5a0df5af2862ce60a7377ed49dd656494ede7f514117f1fbd0eb98d63a4f3fc5dd131bbfd9069bc999fe6e6907a67d3e42af3cd5fe3776bfcdd5b7b138db58f94e633cf36a9e7e201a373817cd9aa299c0cb999713440ac75f6b91b861ba99e37b6bbeea5300d65d087162"}}, 0x92) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) recvmmsg$unix(r4, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x10}, 0x10}}, 0x0) recvmmsg(r1, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 14:12:53 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 14:12:53 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) 14:12:53 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0xa9, 0x75, 0x0, {0x9e, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfa767e6af9509fe47cc16be521cb6db8c2c55e696902519ba9e867a07492cfa237f728699c143c39ef73a3e033629fcadaf16679a73f0c8a0fa812327addbded8456483c469960033167fb5a0d2a154a9584bed1b28ce422176aecdcba0192bdec19c066a50e85d63df3ae558e1"}}, 0xa9) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000001480)={0x0, 0x0, 0x3}) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:53 executing program 4: setreuid(0x0, 0xee00) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 14:12:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)) 14:12:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:12:53 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x23, 0x75, 0x0, {0x18, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164"}}, 0x23) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r4 = syz_open_pts(r3, 0x0) read(r4, 0x0, 0x2006) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:53 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x48c0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0xfffffd58}}, 0x0) 14:12:53 executing program 4: r0 = syz_io_uring_setup(0x55de, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f00000001c0), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000003c0), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 14:12:54 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB(r0, 0x5451, 0x0) 14:12:54 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x420}, 0x420}}, 0x0) 14:12:54 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0xae, 0x75, 0x0, {0xa3, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d040000000000000000000000000070d4502d3dd15ffbd4d621068bfca19e922fb757988a7eb397c95b3bff648818ff8dc06d780fe410bcde08774e562519f9aafc66889eee22ab92360a5d14933a73756c12452bdb3e7738afaa42e15dd527c4ac380e21c0ca8dfa77493118246139e4239af5255ebdcacdd59f46b4175b5e1ca4518b91"}}, 0xae) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RLERROR(r1, 0x0, 0x15) 14:12:54 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x5c, 0x75, 0x0, {0x51, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7da2e53b47eb85867e370e17f497d040e7d71c16c37de553fe53e45dacb205630"}}, 0x5c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r2 = io_uring_setup(0x104c, &(0x7f0000001440)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) close(r1) eventfd2(0x0, 0x0) close(r2) 14:12:54 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) 14:12:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x7fba, &(0x7f0000000040)) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r2 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r3 = dup(r2) write$cgroup_pid(r3, &(0x7f0000000080), 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x11, r2, 0x0) sendfile(r2, r3, &(0x7f0000000100), 0x6c03) close(r1) 14:12:54 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000ac0)={0x10}, 0x10}], 0x1}, 0x0) 14:12:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001040)={0x0, 0xfffffe43}}, 0x0) 14:12:54 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000780)={0x92, 0x75, 0x0, {0x87, "0389ef6b57cc486f5e2e25f5b12db254a6ec297c25e3d91928a781e7d1fcce30ac913da4316c2091aff6bc68007f7f497d04000000000000000000000000004062f0ffff030000000000000078df6fa7de595f61c692fbb6ea28e4b4398af74331891ae3bba569a6d7ab88fd1cba718b07ed5ecd0c35281e76a945234e99737535bf538300957a"}}, 0x92) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) rt_sigreturn() ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x335}) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:54 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x35, 0x75, 0x0, {0x2a, "25f5b12db254a6227ff0e55d8c2ea55180e463e354b0c498fb7e0e8fc1ba3afd9e4d7ee912ce4bac54e2"}}, 0x35) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x2e, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) write$P9_RWRITE(r3, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000000c0)) 14:12:54 executing program 1: r0 = io_uring_setup(0x4fe1, &(0x7f0000000000)) r1 = dup2(r0, r0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x0) 14:12:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, 0x0) 14:12:54 executing program 2: r0 = memfd_create(&(0x7f0000000300)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x00:\xa6Ey\xdb\xd1\xa7\xb3S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cRe\x8b\a\x01\x17\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F\x1c/\xbe\xbd\x06\xd0]E\x1b\xdb\x0fR\xb2\xdf\xfe\x13\xdb\xb4\xe4\x91\xee,qp\xef\x843\xdbhf\xe2\x9d\x90`2\xe3\n\x9d\xad\x9b\x92\x8c\'\x17r\x12vw\xaa\xfc\xb7\x1e\x83Yt\x00UF\xcf\x11/H\xaa\xb5o*ph\x89', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000080), 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x11, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) 14:12:54 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) dup3(r1, r0, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 14:12:54 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x123741, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:12:54 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) dup3(r1, r0, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 14:12:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140), 0x8) 14:12:54 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000000)) 14:12:54 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 14:12:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001740)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) close(r1) socket$unix(0x1, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r2, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) 14:12:54 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000500)={0x17d, 0x75, 0x0, {0x172, "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"}}, 0x17d) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:54 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x85, 0x75, 0x0, {0x7a, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f497d049fb75f016bcaa6043859189a0484f83b61835272c6c0b9067c033b29f5865f1edae5de79b512bcf8d2a9f127f327e11552402ae76630b4cd96ed"}}, 0x85) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000340), 0xffffff46) dup3(r4, r3, 0x0) rt_sigreturn() writev(r3, &(0x7f0000000340)=[{&(0x7f00000002c0)="c4", 0x1}], 0x1) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001180)={0x14}, 0x14}}, 0x44) 14:12:54 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000200), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000016c0)={0x1, &(0x7f0000001680)=[{0x6}]}, 0x10) 14:12:54 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000b40)={&(0x7f0000000900), 0xc, &(0x7f0000000b00)={0x0}}, 0x0) 14:12:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, 0x0) 14:12:54 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 14:12:54 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 14:12:54 executing program 3: openat2(0xffffffffffffff9c, &(0x7f0000003500)='./file0\x00', &(0x7f0000000000)={0x149842}, 0x18) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x5451, 0x0) 14:12:54 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack_irc', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet6(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 14:12:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14}, 0x14}}, 0x44000) 14:12:54 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) 14:12:54 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', &(0x7f0000000040), 0x0, 0x0) 14:12:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x5618, &(0x7f0000000000)) r2 = dup2(r0, r1) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) 14:12:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) write$P9_ROPEN(r0, &(0x7f0000001340)={0x18}, 0x18) 14:12:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) 14:12:54 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0xd, 0x0, 0x10000}}) 14:12:54 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xcc, 0x75, 0x0, {0xc1, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63986e851b0cb4be35de2edfe3b50591fcb4fab33eb62a9cd3e323f0037587fa02aeaabc0adcf60b3aabafc5faa766166c227cadd6b1a8cbc5cd9cf33d007ccac5f5c26a09d8c73331234f60"}}, 0xcc) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) write$tcp_congestion(r3, &(0x7f00000001c0)='westwood\x00', 0x9) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r2, &(0x7f0000000400)={0x2f, 0x75, 0x0, {0x24, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000"}}, 0x2f) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) rt_sigreturn() recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$P9_RLERROR(r2, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:54 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0x5451, 0x0) 14:12:54 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r0, r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c}, 0x1c}}, 0x0) 14:12:54 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_open_dev$usbmon(&(0x7f0000000200), 0x0, 0x0) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000080)={0x0, 0x0}) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000380)) 14:12:54 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={0x0}}, 0x0) 14:12:54 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x7b, 0x75, 0x0, {0x70, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c6"}}, 0x7b) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:54 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x5451, 0x0) 14:12:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r2 = io_uring_setup(0x104f, &(0x7f00000002c0)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) close(r2) close(r1) rt_sigreturn() r3 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r4 = dup(r3) write$P9_RSTAT(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB='H'], 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x11, r3, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 14:12:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 14:12:54 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000840)={0x29c, 0x7d, 0x0, {{0x0, 0x1c9, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x9, 'trans=fd,', 0xc7, 'WA^|\xa4\xce\xca\x17\xcb\x8d*\xa4\xbd\x9e\x14\xbd\x83\x004\xf1\xbdC\x97%\xfa\x89H\x87\xbe\xda*\xd3+B>Y\xab\x9cM\xbc\x0fb\x83\x14.\xaa`,q\x17\xf6\x84\x83\xa5\x16rOvM=vW\xee\xd2\x10\x94\x8c\x98\xad\xb9\xc0\x8a\xdaAu\xae\xdc,cLKN\x03\x9dV2\x053\xc0\vH\xe5x_5\xfaI\xa1\x95\xbf\xd8\x1b\xe6\x01\x03^\xe0K\xee0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r2 = getpgrp(0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x104}}, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) tkill(r2, 0x14) 14:12:54 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) close(r0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) 14:12:54 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x60, 0x75, 0x0, {0x55, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280ecc846b7d1f7fabf9614b34419c2394c"}}, 0x60) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r2, &(0x7f0000000400)={0x3c, 0x75, 0x0, {0x31, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0df"}}, 0x3c) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) rt_sigreturn() recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$P9_RLERROR(r2, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:54 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 14:12:54 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r2) listen(r1, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={0x0, 0x1cc}}, 0x0) 14:12:55 executing program 2: sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x9c7aa7fdc8c7354a) 14:12:55 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) write$P9_RWALK(r3, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:55 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigreturn() r0 = io_uring_setup(0x4939, &(0x7f0000001440)) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) 14:12:55 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r0, r1) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 14:12:55 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x40, 0x75, 0x0, {0x35, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7da2e53b4"}}, 0x40) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$AUDIT_USER_TTY(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:55 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 14:12:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000400), 0x40, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) 14:12:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 14:12:55 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) process_madvise(r1, 0x0, 0x0, 0x0, 0x0) 14:12:55 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg(0xffffffffffffffff, 0x0, 0x0) writev(r0, 0x0, 0x0) 14:12:55 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r0) syz_open_dev$sg(&(0x7f0000000640), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, 0x0) 14:12:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) close(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in6=@empty, 0x0, 0x4}}, 0xe8) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:12:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x8000) 14:12:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001d80)={0x0, 0xfffffffffffffec7, &(0x7f0000000000)={0x0}}, 0x0) 14:12:55 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb82e336200000000) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 14:12:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, 0x0) 14:12:55 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x3b, 0x75, 0x0, {0x30, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0"}}, 0x3b) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:55 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x80, 0x75, 0x0, {0x75, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7da2e53b47eb85867e370e17f497d040e7d71c16c37de553fe53e45dacb20563021138d522befde963256be8e59da8217957a7f9ec71fc9fa3b7f39c97cac80455cc9b4cb"}}, 0x80) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:55 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xc4, 0x75, 0x0, {0xb9, "25f5b12da264a6d385c8be89c88483459b8a8fb7e631fcbe609d840a5a0df5af2862ce60a7377ed49dd656494ede7f514117f1fbd0eb98d63a4f3fc5dd131bbfd9069bc999fe6e6907a67d3e42af3cd5fe3776bfcdd5b7b138db58f94e633cf36a9e7e201a373817cd9aa299c0cb999713440ac75f6b91b861ba99e37b6bbeea5300d65d087162b14fc011b1f0e11ccbb1fbba5ae0e224d32a36c6f590524cf6ce1f8d3227a527ede7009fd928c9b42516196450fa7a5c5ddc"}}, 0xc4) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) recvmmsg$unix(r4, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:55 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 14:12:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) r2 = gettid() tkill(r2, 0x14) 14:12:55 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigreturn() r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$GIO_CMAP(r0, 0x5409, 0x0) 14:12:55 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000000c0)={0x5d, 0x75, 0x0, {0x52, "b850e64e921fe5005f876f0e6db32a71f600433f0b44b8ac08a5ad2b4223872fb95a3866da939999f3d665e2cd425122e4b3a71541017d8494950df3113271f19a563bbe6e102ad6930446d2b92cd7c7fda5"}}, 0x5d) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:55 executing program 4: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 14:12:55 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack_irc', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000000c0)) 14:12:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f00000061c0)={&(0x7f0000005fc0)={0x14}, 0x14}}, 0x40000) 14:12:55 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) read(r4, 0x0, 0x2006) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000003a80)) r5 = dup(r4) rt_sigreturn() ioctl$RTC_UIE_ON(r5, 0x7003) write$P9_RREAD(r1, &(0x7f0000000980)={0x89, 0x75, 0x0, {0x7e, "1039de23002db6eef7d1b1d9a91790a9de1362da384df24f3d76719dbeaac1d533ad3b59b0529d9758acec47b7b021b23137d604d8a5e7cd4dc7260601685a408cc14a4c3f8f4b7bb9e8a4beacb6f05c47859f9cdb02de311c44de083fb6f187587fd0f4d02acb0cac43adc7a84e88100f106b9dfa887a37e612a1a9d0d8"}}, 0x89) 14:12:55 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) 14:12:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = dup2(r1, r0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f00000010c0)) 14:12:55 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x3d, 0x75, 0x0, {0x32, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc1"}}, 0x3d) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r4 = dup(r3) write$cgroup_pid(r4, &(0x7f0000000080), 0x39) sendfile(r3, r4, &(0x7f0000000100), 0x100000000006c03) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:55 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x99, 0x75, 0x0, {0x8e, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63986e851b0cb4be35de2edfe3b50591fcb4fab33eb62a9cd3"}}, 0x99) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x104c, &(0x7f0000001440)) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) close(r1) close(r0) socket$unix(0x1, 0x1, 0x0) 14:12:55 executing program 3: mkdir(&(0x7f00000028c0)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000002a40)='./file0\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) 14:12:55 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) sendmsg$AUDIT_USER(r0, 0x0, 0x0) 14:12:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup3(r1, r0, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "280cf0afb077d8f1"}) 14:12:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 14:12:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000001780)={&(0x7f0000000500), 0xc, &(0x7f0000001740)={0x0}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) rt_sigreturn() r3 = eventfd(0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RSTATFS(r4, &(0x7f0000000080)={0x43, 0x9, 0x0, {0xffff57c8}}, 0x43) write$cgroup_type(r4, &(0x7f0000000240), 0x9) 14:12:55 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@multicast2, @broadcast}, 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000040)='@]}.\x00', 0x40, 0xd2, &(0x7f0000000100)={0x1f, 0x3, 0x1f, 0xfff}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x5451) 14:12:55 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) 14:12:55 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x43, 0x75, 0x0, {0x38, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb858"}}, 0x43) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'cache=fscache'}}]}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:55 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000002e80), 0x1, 0x0) write$P9_RSTATu(r0, 0x0, 0x2e) 14:12:55 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x4c}, 0x4c}}, 0x0) 14:12:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x7) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 14:12:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b00)={0x14}, 0x14}}, 0x44814) 14:12:55 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack_irc', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) 14:12:55 executing program 1: r0 = open(&(0x7f0000000200)='./file0\x00', 0x105043, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001d80)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 14:12:55 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RLERROR(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="18"], 0x13) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) rt_sigreturn() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:55 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x1f, 0x75, 0x0, {0x14, "25f5b12db254a6d385c8be89b81278a781e7d164"}}, 0x1f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0), 0x4) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x81000002) close_range(r0, r0, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000140), 0x4, 0x2040) pread64(r2, &(0x7f0000000180)=""/183, 0xb7, 0xc1) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000002c0)={{r0}, 0x0, 0x10, @inherit={0x48, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x6, {0x1, 0xfffffffffffffc00, 0x7, 0x0, 0x101}}}, @devid}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000012c0)={0x7, 0x6, 0x3ff8, 0x0, 0x800}, 0x14) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x20004040) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'ip6_vti0\x00', 0x0, 0x4, 0x89, 0x3, 0xffffff80, 0x9, @dev={0xfe, 0x80, '\x00', 0xb}, @private0={0xfc, 0x0, '\x00', 0x9}, 0x8000, 0x720, 0x5, 0x40}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001540)={'syztnl2\x00', &(0x7f00000014c0)={'gre0\x00', r3, 0x8, 0x700, 0x6, 0xffff, {{0x11, 0x4, 0x0, 0x22, 0x44, 0x0, 0x0, 0x5b, 0x4, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0xdf, 0x0, 0x5, [0x4, 0x0, 0x7fff, 0x1, 0x10001]}]}}}}}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000007, 0x10, r2, 0x5047a000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000001640)={&(0x7f0000001580), 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x20, 0x5, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x20}}, 0x40004) fcntl$dupfd(r2, 0x406, r2) fsetxattr(r0, &(0x7f0000001680)=@known='user.incfs.metadata\x00', &(0x7f00000016c0)='\x00', 0x1, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0) 14:12:55 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x5421, &(0x7f0000000080)) 14:12:55 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x14, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX, @NL802154_ATTR_IFINDEX, @NL802154_ATTR_WPAN_DEV, @NL802154_ATTR_WPAN_DEV, @NL802154_ATTR_WPAN_DEV, @NL802154_ATTR_IFINDEX, @NL802154_ATTR_WPAN_DEV, @NL802154_ATTR_IFINDEX, @NL802154_ATTR_WPAN_DEV]}, 0xfffffffffffffde9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 14:12:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x4) 14:12:55 executing program 0: r0 = open(&(0x7f0000001e80)='./file0\x00', 0x105043, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 14:12:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) r2 = dup2(r0, r1) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x0, 'cpuacct'}]}, 0x9) 14:12:55 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SYNC(r0, 0x5450, 0x0) 14:12:55 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/usbcore', 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x5450, 0x0) 14:12:56 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x5451, 0x0) 14:12:56 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x5451, 0x0) 14:12:56 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x1c, 0x75, 0x0, {0x11, "25f5b12db254a6d385c8be89b81278a781"}}, 0x1c) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x33fe0}}, 0x0) write$P9_RSTATu(r3, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000440)={0xffffff73, 0x7, 0x0, {0xc, '/&\xff\x00\x00\x00Y\xcf\x101@/\xaa\v\xba(\\\x8f\xc0\xbcB\x12\x92=s Y\xc9\x83\xd8X\xaa\'\xb1\xa5\xb7\x8a\xde\x96\v\xdc\x05\x9c\x93\xee\xae6+\xbcVub9\xf9\xf7y\xb1`\x87\x86\xe2\x16m\xd4\x1c\x9cr\xbf\xd7\xfc(n\xb9\x00b\"LF\x92K\xc0\x99\x9c\x05\x88\xbe>sn\x9a}[\xea\xed\xf6^\x89H\xa3\x9b\x16\xaf\xa0\xa5\xf1\xb6\xa1\xa2\x986\x8c\x01\xa1\x13\xc2\xd4\x18\x99\x18r\xf6\x19\x81\xf0\x87x\xc8 \xbf\x99\x87\x87l\x00V\x01%\f\f\x8a\xa4\xb9\x11s\x9a\'X\xff\xc2w\x18\\HM:\"\xc5\xcd}$\xc1\xbf\xdc\t\x00\x00\x00\x00\x00\x00\x00l\xe9\xe3\xb9\xf9\x88U\xb5g\x98\xfex\x94a\xf5\xd3\r\xbb\xd7\xce\x8c\x96\xd9\xcfY&\xa6\x82\x12`D\xdd.\x0e\xf9\t6\x87LT\x1ai*o\x84$\xcdG\x13\xadd\x8e\x8a\xcd\xe0\x02`\xff[\xe9\xbb\xcc/\x91\x06\xbc8\xba\xd3Jc\v\x98b\x88\xcd\xbdo\xe2\\\xbc\x05\xd1\xf8<\xf53\xa6=\xf4\xad\x8b\x1c\xdf\xe2\x9e\xe9\xbd\x1c3;\x9amJ\xa0\x192\xbf=u\xf4I\x9a\x8dSY\xd0\xa3\xda!q\xfcXg\b\xcc\xf6Qk\xb8\xc6\x89\"8G\'\xad>2LR\x0f\xc2\xe4n?\xad\xb4?\xbc\xf6\x1a\xa8q[\xd4e\xc85\xaf\xd1y\x9d\xee}P\xbc\xa0o\xd5\xfe\xb1\xdf\xb3\xfeW\xb51\xd4\x1a\xc2\x16\x97\x9a\xc6lN\x9c\x8d{Y\xa2\xfa\xa5,\xbe\x97'}}, 0x10) 14:12:56 executing program 1: ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$sock(r0, &(0x7f0000001f40)={&(0x7f0000000b40)=@generic={0x27, "1557ca7dffdad596b7e50f7e72e108a8abed99f1c5309531e4016896c0ba7cb0092c1d5779f281cdbbde23bb5adbc0b63c1c172c1ad9c2d307c6c92744ea135d02dc6340d46cc306c0c02a36e3471cfb18c306197d4229bcac53edcd83928e953e47bfff99349fd41ae46d1f66f60cb268a20884241ef3122ec326f5ff73"}, 0x80, 0x0}, 0x0) 14:12:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)) 14:12:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) 14:12:56 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x464) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r3, 0x5425, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x36, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r4 = dup2(r3, r3) syz_genetlink_get_family_id$smc(&(0x7f0000000680), r4) 14:12:56 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) 14:12:56 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x3f, 0x75, 0x0, {0x34, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322"}}, 0x3f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:56 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x105243, 0x0) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, 0xee00) 14:12:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 14:12:56 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x17, 0x75, 0x0, {0xc, "25f5b12db254a6d385c8be89"}}, 0x17) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:56 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x5450, 0x0) 14:12:56 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 14:12:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0xc0) 14:12:56 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) recvfrom$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 14:12:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x35, 0x0, 0x4b) 14:12:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x841, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14}, 0x14}}, 0x20004040) 14:12:56 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) dup3(r1, r0, 0x0) write$P9_RXATTRWALK(r0, 0x0, 0x0) 14:12:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 14:12:56 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000001000)={0x512, 0x7d, 0x0, {{0x0, 0x356, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2b1, '\x00\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x02\x01X!\x04\xe1[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0[\xd2;S*\xfc\xb1\xc9Q\f\xca\xd8\xda\x19\xf5\xcf\x13\x11\xd1\b\x90>\xa3\xf6\xb4\x1b\xaf\x9e\xdbM\x17@\x8e\xb9\xb2J\xec\xb1\x99\x95m\rG,\x9a\x11\xe8\xb5\xf2{\'\x11+gUf\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xfem\x1d0aU=\x1eE\xe9w\x1f\xc8j<^\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xc3\x96mN\xf6\xd6\xf1\xb3\xe3\xffc\xd5\xb4\xe6K\xcc~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee;/\xf6\x9f\xcb\x8ac#\xa2\xf7\xe6\x19\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80-\xe3:\xe0$p\xb0\xf5\xaa\x98\xbf\x03\n\x1a\x82J\xf6Z\xa6\xc3\xc6\x144\f\xc2\xfdR\x87cp\xef\x82\xa0\xb7\x1d\td\x1d\xe9\x9c\xe1\xadU\x1c\x05\x00\x00\x00\x8b,\xfcm\x8c\x81\xa7\x17W\x04\xd2\x89W\'*\x10(\x1bS\x11\x80\x1e+Dw\xed\xe0\xd7a\x9dz(U3\x9b\xcf\xde\x03\xe6 b\xd8\xfc\x00\xff\x04b\xb8\xe3\xcd\xea\xd9\x0e\x01\x95A\xf5n\xb0\x11#\xccfi\x84\x05\xf5r#\xfc\x886\xd50\xcd\xd2\xb4\xcc\"\xc1\xa8\xb3\xe3\xa0B\xf5Z \x99y{\xbfK\xdd\xea>\x06\xcf\'b\x96O\xc4\x89\xfeI\x19\xa04\x81|\x89&r\xdf\x85`\xdb\x7f\xfb\xca\xd8\b\xff\xd1\xc6\n\xd5\xd94\xe1\xef\xf6\xc7\xd9\xc3i\xd3\xc9\x8fk\xffT{s\xc0s1=\xaf\x93\xf0\x0e\xa6\xee\x15\xf6\xf7u\xc4I3-3\xd3y\xf3\x90$\x9a\xb5\xa4\x9d\f\xb1@\xd8\xe4~\x90\x0e}\x9c\'\x11\x9a\x15!\xecw\x06\xcb\x80\x81Z\xec\x8b\x8c\xba(\xfd\xadf+/L\xdfc\xd3\xa1~Qa9\xa7}5WJAS\x96O\xf2o\x8fX\xf5\xfd\xd1\xdd\xbd9L8:5\x0e\xba\xfe\xcd\xf1\xa3\xad[\xd5\xefM\xda\xd8\x1b\x97r\xfaj&H\xfa\xa9\x035\xca\xa8\xab\xd0\xbf\x85q\xb6@\x16\x8c\xd4K6\xea7\xd6\xad\xa9(|/z\xc4\xce\x86\xce#\x83\xc43\xf6\x1f\xbe\xd6x\xb9o\x91>\r\xb2\xa3@\xec\xe0\x7f\x17d`p\xa1\xe6\xf83DJ\xcew0\xa3c3*&\xdb\xd6\x13v\xdf\xd9\\\xe6&YO\x8f\x8e\f*\x96\x0fxvf\xb1\bg5\\y\xfd\xda\xd7D\xa7\xd9\xbf\xe2Kg\x12\x7f\xe7\x12\xaf\xe7\xadD,2Z\xb1\xac\xbe\xfa\v\xaf\x97i\r\x87d\x86h\xad\xdc\xdf\x90\xc8(\xe54\xbc\xdf\xef5\xd3\xba)\x1e\tm\a\x18', 0x2, '\xd1l', 0x70, '\x80\x82\x00\x00\x00\x00\x80\x06\x80\x00\x00\xb5\xd9\xdd\xd2\x87\x8c\xb2}\xb53\xdc\x830\xad\xe5\x06\xa6)\xa2\x0e[\xde\xcfdU\xbf\x85x\x00\xc5/\x97\t\x8e\xf8\x91O\xac@|\xbf\x8c\x85\x8d\b\xb6\xe5\x7fof\"\xeb_jG\xf1\xe2\v\xc5\x1a\aa4\xc6_#\xb5u~\xe1z,\xc61\xd3\x1e\x06\x99\x83\x14\x92+\x183\x92\xddF\\=L0\xdd\x04\xda1\x84\x88\x10\x00\x00\x00'}, 0x1a7, '\xea\x17\xaag\xa0\xe9@\xbd\n\xfc\x01}\xff\x16H\x99;/vo\'\x86\v\xaf\x16\xdb\xba\xee$z\x85K\x17\f\xeb\x8a\b\xd2\xea\xa0\r\x00\x00\x00\x00\x00\x001\x05x\xf7\xea\xfbw\xcaw\aL\x88v\xcb}\xa0\x90\xe7f\x9c\t \"\t\xbeN\x94\x12\xe8\x9f\xfcb\xba&r\x12y=\x7f\x80D\xb3*Dbu\x9f&Z\xff\xf6\x02l\xa4\xb2K?\b\x1b\x91\xb4\x98\xf0\xc3\xb7\x8b\xb2\xd3\x0e\xe4\fv\xdae\x95`\xf4\xa1+=x\xc0\xde\xc6\x18\xbc$\xe3\xe3G\xd2,\xba\xf4\xa0lW\xc2\xeal|\xcd\xf0\x99\xa9\xa29\xbf\x03C\x93\x8c\xbd|\xc1\xd8%\xee\xd9\xa5\fC\x80\x1b\\\x99!\xe2\xb8\xff\xd3=^\xb4\xad\xf2\x95\x16\x9a\xe4\xcc\xef}\xa3=\x86=\x85$\tHz#i\'\x15\x87\x9aGt\xaa\xae\x7fScz2\xed\t&\xf3[\"\x93\xd6\xbbt\xc0\xfd*\xbfS-\xf7\xec^SB\x12\x05~\x89\xa6W~\xecr\xc2\fX\x99\x91Ao\xc5\x7f\xaf\xa3\xa7\x84\x13Y\xa1w.\x03ER\xd5\xf6Cn\xbb\xba\xf5\x81\x80\x06\xc5`\xfd\t\x8di}\x87\xe8\xf2V\x92q%\xdd\xf7h(\x01\xa4\xd2\t\xad\xf0\xa9%\x87?m\xd3\x9f\xf1]n\xb8dz|\xda\x94i\x9d\xcc%\x9a!\xbd\xa8\xde\xea_\xb4\x17\xe3\x97|\x81\x18+\xa6\xc9\x93W\x18wL\xa0<\r\xce\xc9\x8f\xc8>\xf8\xd3[\xf1\x98\x91\x98\xbf\x1a\xf3 \xdd}|\x1d\xef\x8c\x01\xc0\xfa\xe5\x9b\xcf\x1d\xe2\xbc\x92I\xffefKP\n:\x15Yn\x15^0_\xe2\x0f\xd6\xf3{)\x92j\x16\xa4s\xc3\x1f\xb6#V\x12Wa\xb0)\xf0\xa8\xa3\xbe\x95\xcd\x8af\xfc\xea`'}}, 0x512) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = signalfd(0xffffffffffffffff, &(0x7f0000000980), 0x8) read$ptp(r3, &(0x7f0000000a00)=""/231, 0xe7) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) 14:12:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x6032, r2, 0x10000000) 14:12:56 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x2f, 0x75, 0x0, {0x24, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000"}}, 0x2f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:56 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000000c0)={0x57, 0x75, 0x0, {0x4c, "b850e64e921fe5005f876f0e6db32a71f600433f0b44b8ac08a5ad2b4223872fb95a3866da939999f3d665e2cd425122e4b3a71541017d8494950df3113271f19a563bbe6e102ad6930446d2"}}, 0x57) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) 14:12:56 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}}, 0x0) 14:12:56 executing program 2: r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/253) 14:12:56 executing program 4: mknod$loop(&(0x7f0000000480)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000a40)='./file0\x00', 0x4000, 0x0) acct(&(0x7f0000000c40)='./file0\x00') 14:12:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14}, 0x14}}, 0x10) 14:12:56 executing program 3: r0 = openat2(0xffffffffffffff9c, &(0x7f0000003500)='./file0\x00', &(0x7f0000000000)={0x14d940}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 14:12:56 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x4c, 0x75, 0x0, {0x41, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f"}}, 0x4c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000003000000e9"]) r1 = dup(r0) write$snapshot(r1, &(0x7f00000000c0)="ee281210adef49c6c48561fd5873b1eff2e0404b8b2e3cc031f9eb1376525e6317bc931474c12f7281e7", 0x2a) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_STA_WME={0x4}]}, 0x28}}, 0x0) 14:12:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) write(r1, 0x0, 0x0) 14:12:56 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000c40)={0x14}, 0x14}}, 0x0) 14:12:56 executing program 3: symlinkat(&(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') chroot(&(0x7f0000000040)='./file0\x00') 14:12:56 executing program 1: r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_secret(0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14:12:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./mnt\x00', 0x3, &(0x7f0000000000), 0x4, 0x24f, &(0x7f00000002c0)="$eJzs3U1oFGcYB/BnZnfzuZS0vRQKbaGU0gZCeiv0kl5aCJRQeii0QkTEi5IIMcHbricvHvSskpOXIN6MHiWX4EURPEXNIV4EDR4MHvSwsl8SccGQTXY08/vBZDKz887zDjP/d2YPwwaQWyMRMRERhYgYjYhSRCTbN/iuOY20FhcHV6cjarV/nieN7ZrLTe12wxFRjYhfI2IlTeJ4MWJh+f+Nl2t//nhuvvTDleX/Bnt6kC2bG+t/bV2eOnt98peFu/efTiUxEeV3jmvvJR3WFZOIL/aj2EciKWbdA3bi79PXHtRz/2VEfN/IfynSaJ6883N9K6X4+VLnlrXKhWf3vu5tb4G9VquV6vfAag3InTQiyq2H1Mb/kaZjY81n+IeFofTE7Nyp0WOz8zNHsx6pgD1S//69/sfN/hvDjcwn6Vgr/08KzfwDB1WlNV96VP+7Vci2N0BvlSPWRw9Xfgr5h9yRf8ivVv4HQv7h09W3u2bu/5Bf8g/5Jf+QX/IP+SX/kF/yD/kl/5Bf2/MPAORLrX+HLwpX2w2AgyLj4QcAAAAAAAAAAAAAAAAAAOhgcXB1uj3tw+4HOq28fTFi8/eIKHaqX2j8HnG76dCLpL7ZW0mzWVcOfdvlDrp0NeO3rz97nG39O99kW78yE1E9ExHjxeL711/Suv527/MPfF460mWBLv32b7b1Xy9lW39yLeJWffwZ7zT+pPFVY955/CnXz1+X9U++6nIHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9MybAAAA//9RD2XY") 14:12:56 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="03"], 0x443) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:56 executing program 4: creat(&(0x7f0000000540)='./file0\x00', 0x0) r0 = open(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 14:12:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, 0x0) 14:12:56 executing program 3: setreuid(0x0, 0xee00) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002300)='/sys/module/xz_dec', 0x0, 0x0) fsetxattr(r0, &(0x7f0000002340)=@known='user.syz\x00', 0x0, 0x0, 0x0) 14:12:56 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x84, 0x75, 0x0, {0x79, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f497d049fb75f016bcaa6043859189a0484f83b61835272c6c0b9067c033b29f5865f1edae5de79b512bcf8d2a9f127f327e11552402ae76630b4cd96"}}, 0x84) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000340), 0xffffff46) dup3(r4, r3, 0x0) rt_sigreturn() writev(r3, &(0x7f0000000340)=[{&(0x7f00000002c0)="c4", 0x1}], 0x1) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:56 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = memfd_secret(0x0) dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)) 14:12:56 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0xca, 0x75, 0x0, {0xbf, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfa767e6af9509fe47cc16be521cb6db8c2c55e696902519ba9e867a07492cfa237f728699c143c39ef73a3e033629fcadaf16679a73f0c8a0fa812327addbded8456483c469960033167fb5a0d2a154a9584bed1b28ce422176aecdcba0192bdec19c066a50e85d63df3ae558e19c14c55873a202b3375a848fcb86f35d080e44fe7e8cbded50ea34b9781718b10c"}}, 0xca) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000001480)={0x0, 0x0, 0x3}) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:56 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) read(r4, 0x0, 0x2006) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000003a80)) r5 = dup(r4) rt_sigreturn() ioctl$TIOCGSOFTCAR(r5, 0x5419, 0x0) write$P9_RREAD(r1, &(0x7f0000000500)={0x159, 0x75, 0x0, {0x14e, "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"}}, 0x159) 14:12:56 executing program 2: r0 = memfd_secret(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r1) close_range(r0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 14:12:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000000)) 14:12:56 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="540000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000b40)={0x435, 0x7d, 0x0, {{0x0, 0x27a, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x126, '\x0e\xb3\xcf\xd4BU\xb9\x90\xc4\xc3\xc8]\xaf\xb6\xd2~7\xa6\x8b\xf6\x15\x9d\xa0?*\xcf\xaa\x9c\x10\xe1\x12\xe8\x93nyx\x04`=\x8e\xe8\xc3\xdf\x98sF=\xeb\x85O\xee2\x15\x1a\xac\x97\xeeW\x8f\xbf\x11\xdf\t\xf9\xee\xb7)\xb0wI\x0f\x8c5\xfa\xaa-\xb5\xec\\\x9bG\x16\xf8vh\xee$\xc3)\xaf\xb5+n\x1f7\xfc\xaa`Lb\x84\xf1\x0f\xe4\v\n\xf6\xa7\x7fn\\nl\xc5\xc8\x8a\xf7r\r\xc1B\xa7\x00q\x8b_{O>\xe6)s\x9a\x84\x11\x05h\x9da\x11(\xb1|p\xe2\xed_\x1f\x9c\xc5\xaf,\x0e0\a\x00\x00\x00#\xe4\xaao\x98\xb7i\x1f\x93\xc4?\'\xb2\x83\xc8\']\xba\xe8\xc5\xac\xe0\xf6\xd8,5\xa4\t\xbf\xa3\xefR\xbf\x8f\xdfl?\x05\x88\xd8\x85\xd0\x0edI\xbf\x1c\x17\'.\x9e\xebf\xd2H\xf3\xaaA\xa3\x80u\x17_\xfcV\xbe+Y\vF\xfe\x80\\\x95\xca^^\xaf\xfb}@i\xe7\xdc\xd2\xbb\xc6\xd3^\x03\x11i*\xd2\xb3RA6\x9e_\x06\xb2\x95\x10LPHH\xf7~\xdb\xa8o@\xa4\xc2\xf6\xca\xea@(w\xb3\xda|\xf0\xbc\x95$b\x02\xedA\xdaw\x00', 0xe2, 'r&dnoT\x85{\xb5\x1b\t\xa3`L\xc0\xd2\x1c\xa3|\x91\x98g\xc4g;\x0f\x02\xa9\xdf\xcdBv\x14\xc6\xca\xda\xd1\xca\xc9\x87)\xf6\xae\xfa\f4\x7f\x7f#n\xe4Q\'\xfc0$\x03\xca\x7f\xd0\x8e\f\xc6E\x86\xef_\xf6\x8e\x0f=iA\xed\x81\xe7\xd0\xab\\~e\x18=\xa8\x82\xe2m\xba\xa9\xe9\xdd\xd4\xe0\x06\xe8Z\xed\xc9\xf7l\x14c\x9c\x8fT\x84,\xc5\xc4\x1ef\xcf\x96\xbe:,H\xa4\xf7\x94>\'\x10B\xac\"Q+<\x9c\xcb\x8ebD\x9c2\xfd\x12\x1f\xf1\x1d\x9f\xd5\x80\xb7\xc5v\am\x1bzl\xda\xbe\xf2\n!|\x14/\xcc\xa2P\xec\x14\xc2\xa0\xcd\xd5\v\xd0\xb3T\xacm\xc3G\xb4\xae\xd7\xc1f\xcc\xbcs5z\xfaW\xa2\x8a8\xcf\x8c5h$:\xdct\xc1\\3\x83\xdf\xd2\x06\x1c\\.\xdb\x91\x8f\xf8\xf2Kr\xcc\xc1\x7f[mp<\xcam', 0x3, '\x00\x00\x00', 0x3c, '\a\x89\xa8\r^\xc6\xe5\xb74\b\x00\x00\x00\x00\x00\x00\x00\xf6\xab\x9eV\x98/D1\xf9-G\xf2;\xd9\x84\xc28\xfcMp\x90\xb4\xc9\xd0\x14zTe\xc9\x92\xf1\xf5\xf5iB\x00b\xf4\xe5\x99S\x8d\xf9'}, 0x1a6, ';sy\xc1\xfc\xf8!\\p\xc0\xdd\xbd\x9e\xc31\xa5\x00{F\xab\x06T!\xe7\xc3\xe7Z\x94\x1b\xf4\x11(\x14)\xa8\xd0z\xd1X\xe15\xb2\xb6[\x82\xac_q\xd3\xcc\x02\x00\x00\x00\x00\x00\x00\x00r\xb9\x83\x8fw\xcctH\x80\x7f\x1e\xd9\xb1\\\xb4A\xabN[\xcd\x8e\x9a\xfc\xe0\xba\xeb\xf6\xb5\xf8R\xc1\xf3sb\xb8\xd2\xa8P,\xad\x7f\x94P\xcdg\x00\b\x00\x00\x04^\x88\xe9\x18fVl\xa0:\x84\xb6[^\xa7\xafI|\xf2\x8ew\xef\x05\x17]4q,\r\x7f\x857\x1aDF\xce\x1d\xcfF\x87\xc2r|U\xae\x89G\x9e\xef\x7f{\x98\xcbXT/\bee\x0f\x0fY*8\x9d.\'\xcc\xb3\xfc\xf9\xd0r\xf2y*\x8c\x98\x1a\x00#XJ\x0e\xcdqL,\xc5\xeb_\xbd\x90\x0e{D\xc4\xf9\x1c\xae_\xb3\xa5\\q\xb1\\CWM~g\x99\xf4\xbf\xe6\x06\x18\xcf\x1e\x9c\f1s\x1fG\xb0\xc4\x92V\xa8\xb9\x10WV\xe4\xef\xc5\xfc#\x04M&\xc6Z\t\xbc$[\x8e\xeeRX\xa3\x1b\xa5\xf5\xe1c\x90B\xf6c\x1f\x13\x03\x9b\x0eBr7\xa6\xc8k\xe2Zi\x05\"\xad\x00W\xa4\xfel:\xee\x19$3\v\xed\x86\xd3\xff\b\xbfo?\x1eN\x81\a\x89\xc6.`\xcc\x83\xae@\a\xf5\x9d\xcf\x85\xf2F\x9f\x05\xaf\x97\x93\xd5\x89\x96\xd7\x94)E\xfflL\x01\xffMm\x83\x18]a\xe5b\x92\xbf\xc5\xfdW\xeaf\x1c!\x13\xe5\x18\xfd\xf5\xf7\xbcv\xa7U@O/=u\xce\xce\x96fX\xb9\x15\x12\xdf\xb6\xba\xe7\xebx\x18$CK\x14\xc5\xbbU\a\xdak\xd7\x16\xf5P\x8e\x03B\xa7\xd9\x8d\xd8\x8btZ\xa2\x84\xc2\x17\xd0E\n\x8a\xf3', 0xee01}}, 0x435) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000030000001e"]) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x14}, 0x14}}, 0x0) 14:12:56 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x22, 0x75, 0x0, {0x17, "25f5b12db254a6d385c8be89b81278a781e7af607c15d1"}}, 0x22) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:56 executing program 2: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 14:12:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) creat(0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:12:56 executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000001c0)={0x335, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) tkill(r0, 0x7) 14:12:56 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x2a, 0x75, 0x0, {0x1f, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d"}}, 0x2a) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r3) recvmsg$unix(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:56 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) 14:12:57 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xbd, 0x75, 0x0, {0xb2, "25f5b12da264a6d385c8be89c88483459b8a8fb7e631fcbe609d840a5a0df5af2862ce60a7377ed49dd656494ede7f514117f1fbd0eb98d63a4f3fc5dd131bbfd9069bc999fe6e6907a67d3e42af3cd5fe3776bfcdd5b7b138db58f94e633cf36a9e7e201a373817cd9aa299c0cb999713440ac75f6b91b861ba99e37b6bbeea5300d65d087162b14fc011b1f0e11ccbb1fbba5ae0e224d32a36c6f590524cf6ce1f8d3227a527ede7009fd928c9b4251619"}}, 0xbd) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) recvmmsg$unix(r4, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000009c0)) 14:12:57 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) write$cgroup_type(r0, &(0x7f0000001880), 0x9) 14:12:57 executing program 1: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010163, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) 14:12:57 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x5452, &(0x7f0000000000)={'veth0_to_team\x00', {0x2, 0x0, @dev}}) 14:12:57 executing program 4: r0 = memfd_secret(0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), 0x4) 14:12:57 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) rt_sigreturn() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_xfrm(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], 0x33fe0}}, 0x0) sendmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 14:12:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) 14:12:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x14}, 0x14}}, 0x200080d0) 14:12:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') read$watch_queue(r0, 0x0, 0x0) 14:12:57 executing program 0: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$binfmt_aout(r0, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, "f44779"}, 0x23) write$cgroup_pid(r1, &(0x7f0000000080), 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 14:12:57 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0) 14:12:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x4a0}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14:12:57 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000000)={0x70, 0x75, 0x0, {0x65, "25f5b12db25605000000be89b81278a78159fa98ba58cb9ed9ab51551560c2e7af617c15d164c1d26e0a9b4d27da08271b35ef24b33df29933a03032e9cfd9110f48a913c4634907000000654c0f41885d5fd4d0c477d4141834a720020fd01e2d7af52940"}}, 0x70) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) accept$unix(r3, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:57 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000000)={0x49, 0x75, 0x0, {0x3e, "25f5b12db254a6d385c8be89b8d5667474e7bf607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe4a102e27f8ead65d0b13bf911b8a52d2090591e9"}}, 0x49) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x2e, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0xe0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5008000, &(0x7f0000000100)=ANY=[@ANYBLOB="7567695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f721829616d653d6c6f7765722c73686f72746e616d653d77696e39352c747a3d66d9005f786c6174653d312c696f636861727365743d63703433372c696f63c33901643c91793d616363656e746575726f2c0000000000"], 0x5, 0x25f, &(0x7f0000000740)="$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") 14:12:57 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) dup3(r1, r0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000140)) 14:12:57 executing program 3: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001040)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x18}}, 0x0) 14:12:57 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) eventfd2(0x0, 0x0) eventfd2(0x0, 0x0) eventfd2(0x0, 0x0) syz_io_uring_setup(0x435c, &(0x7f00000006c0), 0x0, 0x0) eventfd2(0x0, 0x0) memfd_secret(0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_audit(0x10, 0x3, 0x9) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) write$P9_RSTATu(r1, &(0x7f0000000940)=ANY=[@ANYRES32=r2], 0x473) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = epoll_create1(0x0) rt_sigreturn() epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x902) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:57 executing program 0: r0 = fsopen(&(0x7f0000000140)='ext2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = dup(r0) read$eventfd(r1, 0x0, 0x0) 14:12:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000280)=0x80) close_range(r1, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) 14:12:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x50) 14:12:57 executing program 4: setuid(0xee01) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 14:12:57 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RREMOVE(r0, 0x0, 0x0) 14:12:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x4040000) 14:12:57 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x41, 0x75, 0x0, {0x36, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7da2e53b47e"}}, 0x41) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:57 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000005, 0x10031, 0xffffffffffffffff, 0x8000000) r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0x5450, 0x0) 14:12:57 executing program 4: munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x1, 0x1f, 0x0) 14:12:57 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x64, 0x75, 0x0, {0x59, "25f5b12dc45605000000be89fb42c7882f892ef38ad44019ca72c1a7554b887b0e472b7c32586c4358e4da32696976c7d8b61b2503c9c782d973147e99ce650eb8ab36486a190cd81e6e6c85ceda1cacb3086d99aaedf35d56"}}, 0x64) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x33fe0}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:57 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x48c0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x4c}, 0x4c}}, 0x0) 14:12:57 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigreturn() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x33fe0}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 14:12:57 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {r1, r2+10000000}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x40}}, 0x0) 14:12:57 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 14:12:57 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000001380)={0x760, 0x7d, 0x0, {{0x0, 0x6ad, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x33f, '\xa6\xff<\xd5\xb9a\xfaDo\xb3\xf4az\xcd\x05RC\xea\x17Tw\x83\xf5C\xcb|z\xaf\x13r\xeat\x91\xf8\xfb\xb9\xc7\x1b\xdb\x1e;\xe4(`x#z\be\xf0\bT\f\f\x88FA\xe4D0\xb4\x7f\xf5\xa6\x87BX\xe5\xa7\xa6\xec\xfb|\xff\x8a\x17\xba\xf7\x91\x1a\xd8\xf4\xa7\xc4B\xdeu\xc9\x93\xfe\x951\xf8q8\xff\xd1VSz\x9e5\xe4}\x9b\xb9\x10\xce\xf1\xea\x16}8\xee\xbc\vR\x85\xcbN\xf5\xd93\x8don\xba\x91D{`\xa0s0FzJ\x93\x0f^\xfa\t\xe0C\xe1rE\x9bm\xb8\x12\xf8k3\x7fd\xf3\x93\x18Ld\x16z\xf5N\xa2\x1d\x99\xba|3\xdb\xac\xadf\x14\xbe\x8a\xcew{h\x0e\xca4 W\xfa\x18\x1d\xd9\x9fXm\xd7\xf5-\xb3\xd4\xdd\xa9A\x94\x93\xcb\x04\xeeA\xaa\xaa\xc6\xce\x916\xc5\xe2\xcc\xabW\x8c\x0e&\xa8|\xe5\x11\xf4\xc8\xfe\xc2\xf6\xf0J\x0e\xb9\xbc\xe3\xec\x1f`\xf0\xc2\a\xc0ML\xbf\xa9\xc3\x9f\xa94+R-\x1f\xa0>\x8e!6(\xcc\xc1\xe8\x8d\x12\x1caR\xfc*\a\xd2d%`\x92\xbe\x95\xb5[r\xd5\xb9\xc55\xb8\xff\xdb\xaaI\xd3E\xe2\xbb%4\x9bf\x1f6h7\xb7f\xa73\xba\x7f\xc2\x82|F\x05H\x82\xa3[<\xc6*_\xda\xd5*\xe1\x1dM{\\j\xd7cI', 0x101, '\xeb|`\xff\xf7\xfb;\xd0\x1f\x88F9\xd6\x9a\xacm+\x15\x83\xb2\x83\xf7\xc9\xc6`\x12\xdd!c\xbf_\x88 x\x19o\xa4\xb8\xdel1\x9e\xe5\xcf\r\x8be2\x00&\xc7J\x1e\xb6y\x02\xacv\xa4mZ\xbb\xb9\x02=\x1cv\xc8\x1a\xf9\xd8D\x9d\xeei\x8ba\x8fu?\x97W\x8a\xccYFD\xae\xe5\x01\'\x85c\x06\x00\xd1g\xe6\x1d\xf9?!\x045pW\a%\n\xc1hh2\x9br~\xc3\xc1\xbe!\xbd\xda\xbe\x00\x00\x00\x00\x1e\b7Cdy\x99U\x1d}\xc0 6\xd7f\xe2\x13/\x0fj\xc6\xf7\xb5e\x85\xe0DA\xe6\xc2$Y\xab\x01\x04\x00\x00\x00\x00\x00\x00\x1bu\x9cZ\xf1w9\xc4\ap4\xfa\xa5\xae\'\x9b\xe7\x96x\x9f\xe4\x8b*CP\xa47\x06\x94Wqx\xe1\x8b\xffQ,r^\xef\x17=[.)h\x05YhFu\xe2\xcb\v;\xcejz\xda$\x95\x06\x89\xba\xc5\xf4\xae\xe4\xd3\x19\xee@\x14\xccW\xb2\x1f\xa6\xcez\xfc[\xd0\x00\x00\x00\x00\x00\x00', 0xeb, '\xf0d\xb6\x15W^\xf0\x94T3\x180\b\xd3\xbb\xc9\xee,Sd\x12\xb1\xd1p\xf1x\xd8\xe1\xdbS\x9c;\x9b?\x1a\x95\x19NF\xf05\xda\x89\xf8wY\xfa\xc3b\x9a\xcd\xacJi\xa8Bi\f\xca\xf8i\x12+\xa4&\xc1C\x14\xea\x15\x90\xef[\xf3\f\x1er\x02\xac\xe3\x06;)\x12s \x10\x8fD\xb7Q\xa3;$\xf7\xb3t\x1c\x87O\x7f{D\x82\v\x14\x16\\,\xde\xaf\xd1\x87n\xb8-\xde\x90\xe7d\xdb\xd6\f\xbfj\x8fJdCuT\xf0\xd7y\xb3\x89@\x9eL)!\xa3Vg\xbbO\aG \xa1}\x912\xe3v\xfeC*_\x1e\xbb\r\xb4A9,J/\xad7\x97,\x9ep\xc4vM\xc3\xf4\x13|@\xae\x00~\x81\";\x14\n\xcf\x91\x8e\xa7\xd2|\xa9\xeb\x9a\x8a0Y\xd2\xcb\xa7\x96Kxp\x8au\xbd\xf8\xa8\xa3B\xb3\xd6\xbf6\x83H\xa4\"n\xab<]\x99p~\xb4!\x00\x00', 0x14f, 'O\x9c;\xbb\xbb5\x1e\xb7\x8b\xb8\r\x12\x10#\xd4\xe9\xb9\xdd\xdf\x11\x9bG&\xa0\xcf;\x107\xc5x\xcfL\xd0\n K\xc6\xbd\xdf\x97q\xc8\xe1\xac\xd4)\x91\xcc%}\xea`\xe3\xa1\x9fp\vOQuj\xd0\x15*O\xda\x16\x1ba\xf6\xcc,\xb8;Z\xce\xe2OT\xf3i\xb3\x86d!K\xd1\x043\xa3\xa3\x9bql\x01\x9f-u>nk\xaaW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1bW\xf4\xfa\x87\xc2\xb13\xe3\xcc\xb7\xd0\xea0H\xae\x91\x86\xfa\x9d;\"\xb7\x16\xd1\xfd\xc0\x1d\xf6Fp\x14-\xc9^\xaf\xbeb\x0ez\xb9\xda&\x12\xddA-\xa5L\xc4[\xb7\xf2j#\xb4\bC\x84&\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6K\x85Q,\x9bxX\'\x15\x1c\xe2ob\'?\xe1\xb4\x04\xcd\x0f\x95\xc2\\%\xaf\xf8\x14\xe5EPT&\xceY\x0e\xac\vYWq\xd2\xf5g\xaat\xbe\x1b~\x021\xe5\b\xbe=\x9c\xd0\xce\n{\xe6\xe3\xe1g\xeem\b\t\\X\xc320\xaavDc\xd1{\x93\xac4\x185\xb0\x98\xafg\xeb.\xb9\x89I^G\xec\xd68\xdas\xf3iZ\xa7\x19Wt\xdd\x97\xe3L\x1bj&\xc8\xad\x04U\xc8\x03\xdb\x12\x85\xd7\xb5\x82\"~\x92\xf1O\xacv+\xc6\xe3\xf1\a\xf7\x83k\x91x\xe8\xf6\xf0\x86:e'}, 0x9e, 'yS3\x00A\xb1\x01\xde\xa7\xc3\\\xe9\x13(o\xe8\x80PU\xbf\xeao\x0f\xf5\x1et\xb5\xa9\x91zn1\xce\xc8\xbb\xc0\xf7N\xc9\xd3Z\xe9\xd2=\xb3\xaa\x03?\r\xe4\xf6-R\x03\x986}\xcb\xc3\xd1\xd5\xfd\xb7\x1af\xbb\xa3}\xe3\xbb\xbb\xf4z,{v&\xb8l/\x93Y\x11\x14!\xff\x84\x1fU\xc7\xee\xcb\xa4\xbfRo\xcf\x0e\x81\x92\xd5|0\xaf\x84\x1b\x1f\xb5_\xcbq\x7f8!\xb2g\xef5\\\r-Be\xef8\x17L\xa8\x103w\x1c\xfb7\xe3\xd4\x89rE\xf1\xe6\x18\xa0;\xb8\x81\x95K.L\xe6\xe0\xa17(\xdf\xe9o'}}, 0x760) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPKT(r3, 0x5409, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:57 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x2c, 0x75, 0x0, {0x21, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400"}}, 0x2c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000580), 0xffffff46) r5 = dup3(r4, r3, 0x0) rt_sigreturn() write$P9_RFSYNC(r5, &(0x7f0000000300)={0x7}, 0x7) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:57 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x59, 0x75, 0x0, {0x4e, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280ecc846b7d1f7fabf96"}}, 0x59) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r4 = dup(r3) write$cgroup_pid(r4, &(0x7f0000000080), 0x39) sendfile(r3, r4, &(0x7f0000000100), 0x100000000006c03) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:57 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000680)={0x42, 0x75, 0x0, {0x37, "25f5b12db254a6d385c8be89b812f5a77682aa0c989b1925f65d153d3277202637c096bdcdda178167e9aa79416ce4f4a952507bdb03fa"}}, 0x42) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:57 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000140)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) 14:12:57 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x10050, &(0x7f0000000840), 0x3, 0x51e, &(0x7f0000000100)="$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") mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) close(0xffffffffffffffff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 14:12:57 executing program 2: r0 = inotify_init() r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r1, r0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000740)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 14:12:57 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x23, 0x75, 0x0, {0x18, "25f5b12dc45605000000be89fb42c7882f892ef38ad44019"}}, 0x23) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:57 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, r0, r0) 14:12:57 executing program 4: r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, 0x0, &(0x7f0000000380)) 14:12:57 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r1 = io_uring_setup(0xaca, &(0x7f0000000000)) r2 = dup2(r1, r1) close(r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={0x0}}, 0x0) 14:12:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x33fe0}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001480)=ANY=[@ANYBLOB="010000000400000003000000e9"]) rt_sigreturn() ioctl$KDGKBSENT(0xffffffffffffffff, 0x5425, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 14:12:57 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) close(r0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$unix(r0, 0x0, &(0x7f0000000240)) 14:12:57 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000180)={0x0, 0x0, 0x0}) 14:12:57 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000006c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 14:12:57 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 14:12:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) syz_io_uring_setup(0x5d5, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000005a00)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 14:12:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) close(r1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 14:12:57 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x49, 0x75, 0x0, {0x3e, "25f5b12dc45605000000be89fb42c7882f892ef38ad44019ca72c1a7554b887b0e472b7c32586c4358e4da32696976c7d8b61b2503c9c7b69cc082d97314"}}, 0x49) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:57 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x4d, 0x75, 0x0, {0x42, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f497d049fb7"}}, 0x4d) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000340), 0xffffff46) dup3(r4, r3, 0x0) rt_sigreturn() writev(r3, &(0x7f0000000340)=[{&(0x7f00000002c0)="c4", 0x1}], 0x1) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) dup2(r0, r1) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 14:12:57 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 14:12:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x106b, &(0x7f00000000c0)) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x44}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) close(r1) 14:12:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x22, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r2 = io_uring_setup(0x106b, &(0x7f00000000c0)) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) close(r2) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xd4}}, 0x0) 14:12:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) dup3(r0, r1, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) 14:12:58 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x9b, 0x75, 0x0, {0x90, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280ecc846b7d1f7fabf9614b34419c2394cac12c3f8cf087045607edf5b5b1d81827247e7ec48d36e808d155fa8568c0de7bc129ed91c21ef6ab6ba061e10bf89b63718ce760a3dbb61032d35"}}, 0x9b) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSERGETLSR(r0, 0x5451, 0x0) 14:12:58 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x69, 0x75, 0x0, {0x5e, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280f9c846b7d1f7fabf9614b34419c2394cac12c3f8cf08704560"}}, 0x69) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:58 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r1, r0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040)) 14:12:58 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000400)={0x2d0, 0x7d, 0x0, {{0x0, 0x1fd, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x123, '\x00\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x02\x01X!\x04\xe1[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E\xfc\xb1\xc9Q\f\xca\xd8\xda\x19\xf5\xcf\x13\x11\xd1\b\x90>\xa3\xf6\xb4\x1b\xaf\x9e\xdbM\x17@\x8e\xb9\xb2J\xec\xb1\x99\x95m\r\xe8\xb5\xf2{\'\x11+gUf\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4<\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xfem\x1d0aU=\x1eE\xe9w\x1f\xc8j<^\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xd6\xf1\xb3\xe3\xffc\xd5\xb4\xe6K\xcc\xe8\xcf\xb7\xae\xe8\xee;/\xf6\x9f\xcb\x8ac#\xa2\xf7\xe6\x19\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80-\xe3:\xe0$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d3u>\x94\xf1\x8e\xa4\x15\x95\x1a\x11{\x91N\x92\xc8\xcf\x97\xe9\n\xdf\xaa-\xff\x8c\x0e\x86\xda\xa3/\n\"\xe6}\xca&\xdf4\aI\'\x11Mf\x91\xf5\xb9\x7f\xb2\x9c\x94\xac\xc5?9', 0xf, '\xf1\x96\xc94\x8d\xfc\xa3sh\x9e-\x00\x00\x00\x00', 0x72, '\x04\x04\x00\xdd\a\x10Z\x81\x18\xbb\x1fSvr\x1c\xa8\xb7\xe0\xe4s\xd9\xee\xa9Kx\x89\xd6%^#X\xe4\x1e\x8e\xf0`\x0f\x92\xf5\xe25\xf4\x8d\xcc\x92}\xc0\xe4\xc6/\xa0nf\x0f\xc9\xcb \xfdt\xb0\x19,\x8d\xbb(A\x7f\xaa\x015\x8a\x1e\xfd\x93\xbe\xd7\xeb\xcd\x0f\x94H\xf8\xf2\xc9>\xe1\x17\xbb&\xb0^\xc2\x06#oA\xd9Lq5\xd4\xb0\xca\xfcf\xccz\x94W~]\x11\x83\xad', 0x26, 'twa\x03\x00=v\xee\x90\xb2\xad\xb9\xb5D\rgl\xffx\xae\x1bcV\x00'/38}, 0xbe, '\xea\x99~!Y\xe9@\xbd\n\xfc\x01}\xff\x16H\x99;/Vo\'\x86\v\xaf\x16\xdb\xba\xee$z\x85K\x17\f\xeb\x8a\b\xd2\xea\xa0\r\x00\x00\x00\x00\x00\x001\x05x\xf7\xea\xfbw\xcaw\aL\x88v\xcb}\xa0\x90\xe7f\x9c\t \"\t\xbeN\x94\x12\xe8\x9f\xfcb\xba&r\x12y=\x7f\x80D\xb3*Dbu\x9f&Z\xff\xf6\x02n\xa4\xb2K?\b\x1b\x91\xb4\x98\xf0\xc3\xb7\x8b\xb2\xd3\x0e\xe4\fv\xdaE\x95\xcd>\x0f\x00\x88\xfd\xf2\xa3\xa1\v\x14\'\xf8K\xa7\f\x90\xac-\xa5\x89\x12\x18\xedI\xa5\x81\x9d\xda\xb4\xf60\xc7Q\xd6\x90\x1eF@\xe3\xd8\x17:\xebw]2\xaaV\x9c\xda\xbb\x92<\xee\xf5\xc8q\xdc\xa5\x8c\x95\xda\x99\xa1\x92\xdc\xd2'}}, 0x2d0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) 14:12:58 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x0, 0x0, 0x0) 14:12:58 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nf_conntrack_irc', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) 14:12:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000080), &(0x7f0000000040), 0xffffffffffffffba, 0x0) 14:12:58 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x9) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffea8}}, 0x0) 14:12:58 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r0) creat(&(0x7f0000000f40)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000040)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 14:12:58 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000080)=ANY=[], 0x464) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r3, 0x5425, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:58 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x5b, 0x75, 0x0, {0x50, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280f9c846b7d1f7fabf9614b3"}}, 0x5b) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 14:12:58 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 14:12:58 executing program 0: r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = pidfd_getfd(r1, r2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000040)) 14:12:58 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2a202, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 14:12:58 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="46fd"], 0x15) 14:12:58 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x19, 0x75, 0x0, {0xe, "25f5b12db254a6227ff0e55d8c2e"}}, 0x19) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x2e, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) write$P9_RWRITE(r3, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:58 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x4f, 0x75, 0x0, {0x44, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f497d049fb75f01"}}, 0x4f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340), 0xffffff46) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:58 executing program 0: r0 = memfd_secret(0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 14:12:58 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) rt_sigreturn() r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:12:58 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5450, 0x0) 14:12:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000005c0)='./mnt\x00', 0x3, &(0x7f0000000b00), 0x4, 0x24f, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 14:12:58 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) recvmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r3, &(0x7f00000001c0)='ns/pid_for_children\x00') 14:12:58 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x2a, 0x75, 0x0, {0x1f, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d"}}, 0x2a) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:58 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x9c, 0x75, 0x0, {0x91, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d040000000000000000000000000070d4502d3dd15ffbd4d621068bfca19e922fb757988a7eb397c95b3bff648818ff8dc06d780fe410bcde08774e562519f9aafc66889eee22ab92360a5d14933a73756c12452bdb3e7738afaa42e15dd527c4ac380e21c0ca8dfa77493118246139e4239a"}}, 0x9c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RLERROR(r1, 0x0, 0x15) 14:12:58 executing program 1: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x5452, &(0x7f0000000740)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 14:12:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r2 = io_uring_setup(0x2fe1, &(0x7f0000000280)) write$snapshot(r0, 0x0, 0x0) close(r1) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) 14:12:58 executing program 3: r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x0) 14:12:58 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, 0x0) 14:12:58 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:12:58 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) setsockopt$inet_mreqsrc(r0, 0x0, 0x13, &(0x7f00000000c0)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}, 0xc) 14:12:58 executing program 3: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000080), 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) r2 = socket(0x10, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 14:12:58 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:12:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_tables_matches\x00') ioctl$KDADDIO(r0, 0x5450, 0x0) 14:12:58 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080), &(0x7f00000000c0)='/usr/lib/telepathy/mission-control-5\x00', 0x25, 0x0) 14:12:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000b80)='net/rt_cache\x00') write$binfmt_script(r0, 0x0, 0x0) 14:12:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000002c0)=0x80) dup2(r0, r1) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 14:12:58 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x1e, 0x75, 0x0, {0x13, "25f5b12db254a6d385c8be89b81278a781e7d1"}}, 0x1e) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:58 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xc9, 0x75, 0x0, {0xbe, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63986e851b0cb4be35de2edfe3b50591fcb4fab33eb62a9cd3e323f0037587fa02aeaabc0adcf60b3aabafc5faa766166c227cadd6b1a8cbc5cd9cf33d007ccac5f5c26a09d8c73331"}}, 0xc9) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:58 executing program 2: mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) utimensat(r0, 0x0, &(0x7f0000004380)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) 14:12:58 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) close(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003a80), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)) 14:12:58 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x17, 0x75, 0x0, {0xc, "25f5b12db254a6d385c8be89"}}, 0x17) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:58 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f00000008c0), 0x0, 0x0, 0x0) 14:12:58 executing program 4: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000003ac0)='./file1\x00', 0x40, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) 14:12:58 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)=ANY=[], 0x15) 14:12:58 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x28, 0x75, 0x0, {0x1d, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f"}}, 0x28) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:58 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$getflags(r0, 0x0) 14:12:58 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) 14:12:58 executing program 4: sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x22ac4fb0d6bac9ce) 14:12:58 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000240)) 14:12:58 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000240)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x82}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x40d2}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") syncfs(r0) 14:12:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$getown(r0, 0x9) syz_open_procfs(r1, &(0x7f0000000140)='attr/keycreate\x00') 14:12:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, 0x0) close(r1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 14:12:59 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x23, 0x75, 0x0, {0x18, "25f5b12db254a6d385c8be89b81278a781e7d164c1d20000"}}, 0x23) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14}, 0x14}}, 0x4) 14:12:59 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f00000004c0)={0x3de, 0x7d, 0x0, {{0x0, 0x341, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xe6, '\x00\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x02\x01X!\x04\xe1[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0[\xd2;S*\xfc\xb1\xc9Q\f\xca\xd8\xda\x19\xf5\xcf\x13\x11\xd1\b\x90>\xa3\xf6\xb4\x1b\xaf\x9e\xdbM\x17@\x8e\xb9\xb2J\xec\xb1\x99\x95m\r\xe8\xb5\xf2{\'\x11+gUf0\x1d\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xfem\x1d0aU=\x1eE\xe9w\x1f\xc8j<^\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xd6\xf1\xb3\xe3\xffc\xd5\xb4\xe6K\xcc~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee\xe6\x19\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80-\xe3:\xe0$', 0x12a, '\xf1\x96\x8c\xc94\xaf=v^\x98\xd7\x13\xdb/+4=\x06\xa47\xa0hI\xf4\trbw\xc4\xd0\x00\x00\xbak\x94\xc3\x9aq\xc3r\x9b\xf3\x81]Tm\xa5\xb3\xd3a\x9b\xc5\xa4\x0f\x01\x94\x11\xf4\x95\x8b\xbb\xe8\x94\xb1p\xdf\xc0\xe3\xe3\xa3\xfd\x10\xe4\xb9\xd7\x8a\x98\xf9\xdd\x1a=H\x85\x0e\xd7\x81\xae\xb7\xba(\xea\xf8<\xa8|\t\x95/\xd2\xe0\x1f\x83\x95\xe3=\x0e\xe4\x9aQ\xde\xa7)\x06\x00\xf1\x18I\x05\x8f)\xed\x95\x02. \xcd\x16w]4\xe9\xe8\x1d\x9f\x9f\xd3\xbb\x04\t\xdf1`\xbb\x95\x82#\xee8\xad\xe6\x94I\xbd\x00\x00\x00\x00\x00\x00\x00\xb4\xac!\x8e\xb8<\x94\xe0\xc2\x0fN1O\x18K\xc8C\x93\x86\x85V\xc0\xdc\x00\x93\xd5S\xe4?\x9c\xd4\xfd\t\xe2m\xde\xff9M\x93\xc3\xda\xedd//A\x9eR\x04\xa3\xc7\x8a\x9b7\xdcW\xc41\x8a\x04\xc9oP\xad\x1cx\xd2\xb1,\xdc\x82@52S\xe8#V\xd0\xa8\xcc\x89\xa4\x0eqh\xfa\xc5^\xdb\f\xb29lP\xbd\x9eH\x1dZ\xdd?\x1c\xf5\x8b\xba\xba\xdd\b\rxm8/r\x9f\xaff.\x96\xab\xddj\xcf\x9a\xe8\x8f\xf0\xda\xbe\xf4\x9d\xfb\xe1\t`\x11', 0x1e, '\x03\x01\x89\a\x154o\xc0\x04\xf6!\xb5\xf43=\xb8\x98\xc1\x01\x01\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x95', 0xe0, '_B\xd8\xaa.\xce\xf2C\x11\x84\x05\xb3\x99\xed\xbc\xef<2=\xfa\xdc\xd5\xe2-\xb32>\xda\xc1!W\x00JW\x9b\'\x96\x80i\xa8K\xfd\xd8\x01\xc5\xff\xff\xdb\xe6\xb7@\xf9Z\x80Tk,)\x89\xc6\x03f\x9bQ\xd4f@\xc7`\xf9Y{\xcbr-\xb2h\x91\x0f\x18\xd4\x1e\xb2\x1aw\xaf\xcb\xb9\xf9\\\x1bM\x8d\xa6\xab\x93\x89\x17\xa90xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x8d, 0x75, 0x0, {0x82, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f497d049fb75f016bcaa6043859189a0484f83b61835272c6c0b9067c033b29f5865f1edae5de79b512bcf8d2a9f127f327e11552402ae76630b4cd96eda88f3dc94f70eeb4"}}, 0x8d) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'cache=fscache'}}]}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:59 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000bc0), 0x0, 0x0, 0x0) 14:12:59 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x5451, 0x0) 14:12:59 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000200)) 14:12:59 executing program 1: creat(&(0x7f0000001b40)='./file0\x00', 0x0) rename(&(0x7f00000042c0)='./file0/file0\x00', 0x0) 14:12:59 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000100), 0x1, 0x24f, &(0x7f00000002c0)="$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") cachestat(r0, &(0x7f0000000480), &(0x7f00000004c0), 0x0) 14:12:59 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000d40)={0x5a3, 0x7d, 0x0, {{0x0, 0x3cb, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xe6, '\x00\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x02\x01X!\x04\xe1[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0\x9a\x0f\xba\xef\'[\xd2;S*\xfc\xb1\xc9Q\f\xca\xd8\xda\x19\xf5\xcf\x13\x11\xd1\b\x90>\xa3\xf6\xb4\x1b\xaf\x9e\xdbM\x17@\x8e\xb9\xb2J\xec\xb1\x99\x95m\r\xe8\xb5\xf2{\'\x11+gUf\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xfem\x1d0aU=\x1eE\xe9w\x1f\xc8j<^\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xd6\xf1\xb3\xe3\xffc\xd5\xb4\xe6K\xcc~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee\xe6\x19\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80', 0xd, '\xf1\x96\xc94\xaf=v^\x98\xd7\x13\xdb-', 0x1a3, 'C\x01B,\t+o\xc4\x04\x00\x00\x95\x1d\x8528\x9a\'\x19\x0f1\xca`\x0f_\xc6[$\xac\xe7\xd5b\xf4\x9d\xd8\xc5\x00\xef\xe4\x1c\xae\x11<|J\xc8\xc0\xd1\xab\xd6\x9f\xd9\xce\xdd\x03\xdf\xe4-\x00\x89\x87\xd2O\x7fD|\xe7\x1e\x89\xd5\fh\xeb\xf9\x17\x7f\xa7n\xd5\xaa\x10\xeb\xdf\v<\x13\xe6B\xed\x04\xb2\xf0h\vh\x96\xfa\xd8M\xd5\x17SX\x98\v\xc9\xc80\xd8\x06\x00\xfa\x107mc\nnw\x1b-\xe1\xe1\x87\xb1(\vM!&\xd7s\xae\x99u\x7f\x91\x87|\xc8\x02\xe2{JL\xf4\x1a\\\b\xd2\xb0\x04(\\\x99\xbd\xa1\xb9\x82\xa4\x12S\xd0\x93\xbc\xd8\x159\xdfc&\x1bK\xa3\x0f\xe3@\xd1W\x18\xbc\x11\xb9 \xa9Q\x1f~}@g\xe2i\x1c&\xb5^\xa1\x1d&{\xa3\x0e\a\a\xfa8u\x13y\xbfN\xd8Q\xbdb\xb8\x1d>\x83\xe4\xae\x87G^\xb2\xe2\xd8/\xb3\xbdQ\\:X\xbc\auc\xcf$gT\xdf\t\xd4#U\xa6C\x88\x0e\x1c\xf0\xd3g\x87\x90{\xc8V\x1b\xbd\xfa \xe7Q\xf0n\xe0\xca\xeb{\xbe/4q\xea:\x12\xd1\x05<\xc3Zvv$\xa2\xb9\xd3\xf0\xf94\x90\x1b\x18!6\xce\"\x99\x8egP\x86\xc6\xc2\x859O)\xbb\xa8\xeb_\xea\xed\x9b\x88\x82k9\x9cp!\xdb\x93\xebB\xd4\xef\r\x8e\xf1y\xbd\xc6\xea\xa9Ot\x98!\x14\xc0\xf5\x95\xf9\x81\xbbq\xecQ\xbc\xd6\xef\xa68JvW\x00\v\x1a\xe3U\x16\x18/>\x9crRi,\xe5?\xa4\xb1\xee\xd2n\xa8\xday\xd8\r\xe5\xf1\xbe\xe3T\x05\x98\x99\xfa\x8b\x89a\xcc7\r\x8f)R\xf8x\x056O\xef!\x9a', 0x102, '\xd5\xaad\t\x04I\x9e7\x15\xeac\\\xe8\x8dZ\xb0\xac8!\x95\xeb\x92\x15\xe3@MJ\xd2\xb6\x85\xd3\xd4\xd1`d\xbc\x93\xc3[K\x18\x86\xe6\xd2\xf8\xd6\x06\xe1/\x11\xb8n[^\xb6U\xeb\xd1\x17\x91\xf2\xc4\x92\x94ku{\x83\x05[\x1d^\xd1gf\xc6\x87X\xcf\xf9(1t\x01\x1b\x895 >ft\x88-\a\xfd\x8c\x12\x11\b\xe7\x10\xdc\xccw\x81\xb9\xbcYe\xaf\x89ikC\x03:\xcc\x03TK.\x01\xa9\xff\n\xfb\ba\xcb\x04]]\x1a|\xfdV\x18;\xc9\xdcNO!\xad\xf7\xcd\xad\xddW\xack\xf96\xcbc\xdf\x9c\xccD\xec\x01z\"\xd7\xac\xc2bc\xf6\x05e@Q\xbfz\xe0\xd2\x02\x00\xea\xb4\r\x9b/~\x03\xb9\x0fK\xec\xdf\xfebw\xe7\xfd53\xd9\x17q\xa1D\x01l\xc8\xc0|an\x9d9\xfe\x97\xa6\xf8\xc4\xa3A]h\xa4\xc0n\x0fj4e\xd9\xeewM\xa6\xb1\xa8\xb1\xa9\xb9V}\xbf\xcd\xb0\xbb\x919#\xd7\xac7\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x1c3, '\xea\x17\xaag\xa0\xe9@\xbd\n\xfc\x02}\xff\x165\x99;/v\xef\'\x86\v\xaf\x16\xdb\xba\xee$z\x85K\x17T^22=\xf4\xd0\f\xeb\x8a\b\xd2\xea\xa0\r\x00\x00\x00\x00\x00\x021\x05x\xf7\xea\xfbw\xcaw\aL\x88v\xcb}\xa0\x90\xe7f\x9c\t \"\t\xbeN\x94\x12\xe8\x9f\xfcb\xba&r\x12y=\x7f\x80D\xb3*Dbu\x9f&Z\xff\xf6\x02l\xa4\xb2K?\b\x1b\x91\xb4\x98\xf0\xc3\xb7\x8b\xb2\xd3\x0e\xe4\fv\xdaE\x958\xb0\xe3p\xd6\xea\x94\xb9K\xbdL&\x10\x05\xea>\xe0a=\x83a\x12{l\x8d\x12>6q.\xe6\xb9\xa3\xa9s=\x14\xd7\xfb^[\x1d0\x03\xa9\x9bc*0s9\xbd\x05r\x0er\x81\xa1\xb4K\x91\x02\x00\x00\x00\x00\x00\x00\x00\x9b\tv\x00\x00\x00\x00\x7f\xa4L\x89\x0f\xedk7\r\xbb\xe5)\x10$(\xe24\xcb\xa7\x1f,\xcf\xeat(\x12\x12\x1d\xbe\xc4\x85\x90\xfd\x13P\xcf[&\v\xcc\xcc\xea\xd7\x8a\x9bM\xcf\x06E\x1cc\xd5\xa4\xca1^+\\h\xca\xa7\xc2\x93\x147\xc5\xc2{\xb1\xde\xe5\xeb\x13\xb7l\x9a\x04A\xf6\x16M\xef\x9a\xca\x83\xaf\xacwNE\xff\xc0\xe2v\xa3\xed\xbbH\x01\xda=E\x89*\x80\x1e<\xa7\x9f\xaf(\x1d\x0e\xd0\xa5\t*\xea\x18<\x04p\xe0\xed\xf8oW\x84%\x86F\x84\xeb@\xb4\xde\x1f>y\x9fB\xadU\x12\x99\\swN\xee\x12\xda]\xd8\xdd\xc0q\x80\x91\xf2\x9fW\xf9\xb0/ASd\t\x00\x00\x00\x00\x00\x00\x00\xeb\x87\x15))\xdc+\xf5\x15wP\x1e`,\xf5/G\xf5\x0f\x0e\xc9J{\xa0N\x8c$6Y\xf9\xb8\xc9x3\x8a\x1c?]{]\xd6\'\x83\xec\xdd\xba|\xab\xe2#\xfd,\xab{\xfa\xa6w\xc8\xe3\x05\xffU\xc0\x19\xf4aK\x1dX\xf5'}}, 0x5a3) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:59 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x4) 14:12:59 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001240)={0x14}, 0x14}}, 0x0) 14:12:59 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000940)={0x246, 0x7d, 0x0, {{0x0, 0x226, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x73, '\xa6\xff<lk\xaa=\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1bW\xf4\xfa\x87Q\xbb\x85\xa4\x92r\xe6s\x97,\a\x83\xc7\xe7&\xde\xc2\xb13\xe3\xcc\xb7\xd0\xea0\xf7\xf6Fp\x14-\xc9^\xaf\xbeb\x0ez\xb9\xda&\x16\xddA-\xa5L\xc4[\xb7\xf2j#\xb4\bC\x84&\x00'/163}, 0xb, '\x04\x00\x00\x88\n\x00\x00\x00S3\x00', 0xee01, 0xffffffffffffffff}}, 0x2e) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:59 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xc0, 0x75, 0x0, {0xb5, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63986e851b0cb4be35de2edfe3b50591fcb4fab33eb62a9cd3e323f0037587fa02aeaabc0adcf60b3aabafc5faa766166c227cadd6b1a8cbc5cd9cf33d007cca"}}, 0xc0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) write$tcp_congestion(r3, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:59 executing program 4: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000080), 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_pidfd_open(r2, 0x0) r5 = pidfd_getfd(r4, r3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 14:12:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:12:59 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x32, 0x75, 0x0, {0x27, "25f5b12dc45605000000be89fb42c7882f892ef38ad44019ca72c1a7554b887b0e472b7c32586c"}}, 0x32) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r0, r1) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:12:59 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 14:12:59 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0xb6, 0x75, 0x0, {0xab, "54a6d385fbc6b82e1657176e17f7e200be89fe949fdcc8ae6e389a93f1e2d9078a32107df90748ba4b0af5aaa6b3e5da7379ebbf73bcb75bac9148e52d20f786c49019725689cf515372fe843afd070000000000000002b5777fd8ebc885851028bfe2d28b17a0c7b286d51c6a64e43176894c3d217755577da5ac2a9e0d4e672cbeb3babbe5470bbfcb1dca1a261cf7b50cae0dfab4ba852f76544e9cf20fb98038ae82398bb3d0328794"}}, 0xb6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = eventfd(0x0) read$eventfd(r3, &(0x7f00000000c0), 0x8) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:59 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "104146c9286a252361e8adcf91e9a4048a7f8bbea1be7bb73aaa3c4eb28c27a84a971a3ec1f8c83301e4062d55cc7159d7c2c4ac0315c54a3937ffe9446f7e5d"}, 0x48, 0xfffffffffffffffd) keyctl$get_security(0x11, r0, 0x0, 0x0) 14:12:59 executing program 3: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:59 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) tee(r1, r0, 0x0, 0x0) 14:12:59 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x66, 0x0, 0x20, 0x4, 0x0, @loopback, @remote, {[@rr={0x7, 0x1b, 0x61, [@multicast1, @local, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback]}, @cipso={0x86, 0x8, 0x0, [{0x5, 0x2}]}, @lsrr={0x83, 0x7, 0x0, [@empty]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xbb, 0x8, {{0x8, 0x4, 0x3, 0x32, 0x20, 0x0, 0x0, 0x2, 0x29, 0x0, @multicast1, @local, {[@rr={0x7, 0xb, 0x3d, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @dev={0xac, 0x14, 0x14, 0x39}, @remote}, 0xc) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000b40), &(0x7f0000000b80), 0x2, 0x2) shutdown(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c841}, 0x1) timer_create(0x5, 0x0, &(0x7f0000000e80)) clock_gettime(0x0, &(0x7f0000000ec0)={0x0}) timer_settime(0x0, 0x0, &(0x7f0000000f00)={{r1}, {0x0, 0x989680}}, &(0x7f0000000f40)) 14:12:59 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x7f, 0x75, 0x0, {0x74, "25f5b12da264a6d385c8be89c88483459b8a8fb7e631fcbe609d840a5a0df5af2862ce60a7377ed49dd656494ede7f514117f1fbd0eb98d63a4f3fc5dd131bbfd9069bc999fe6e6907a67d3e42af3cd5fe3776bfcdd5b7b138db58f94e633cf36a9e7e201a373817cd9aa299c0cb999713440ac7"}}, 0x7f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) recvmmsg$unix(r4, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 14:12:59 executing program 3: r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}) 14:12:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/sockcreate\x00') close_range(r0, 0xffffffffffffffff, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) 14:12:59 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000880), 0x80101, 0x0) writev(r0, 0x0, 0x0) 14:12:59 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0xbb, 0x75, 0x0, {0xb0, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309ec290ef7d1c0f6d03c178e7dd934cf77312873cf98c3825b097b45c0122ca4c141103a77f236df342306dd258be938f39409eaf669b34f95ef646e9ed3a81de101b7c14468cf871c019c864f205a3bf5ed7091d7d162944bb4c948ce4007e0e7745a8efb9721129595d7f8289abc322a77d99a639d2a5c824254a91c1fc2befe190ae956"}}, 0xbb) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:59 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xb2, 0x75, 0x0, {0xa7, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63986e851b0cb4be35de2edfe3b50591fcb4fab33eb62a9cd3e323f0037587fa02aeaabc0adcf60b3aabafc5faa766166c22"}}, 0xb2) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:59 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xe9, 0x75, 0x0, {0xde, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280ecc846b7d1f7fabf9614b34419c2394cac12c3f8cf087045607edf5b5b1d81827247e7ec48d36e808d155fa8568c0de7bc129ed91c21ef6ab6ba061e10bf89b63718ce760a3dbb61032d3575eff8e55f8a0642b282da7cc79bd28b01930abdd6bd6eaa0c7a2ba68a1715868414715747693ead1e2abb2b56a6473f66fcae53dd05a5bf88c11e47a739a15290f87a5e1febd03f6dccd2a8e4c4"}}, 0xe9) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:59 executing program 4: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setreuid(0x0, 0xee00) ioctl$BLKBSZSET(r0, 0x40081271, 0x0) 14:12:59 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x86, 0x75, 0x0, {0x7b, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f497d049fb75f016bcaa6043859189a0484f83b61835272c6c0b9067c033b29f5865f1edae5de79b512bcf8d2a9f127f327e11552402ae76630b4cd96eda8"}}, 0x86) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000340), 0xffffff46) dup3(r4, r3, 0x0) rt_sigreturn() writev(r3, &(0x7f0000000340)=[{&(0x7f00000002c0)="c4", 0x1}], 0x1) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:59 executing program 0: pipe(&(0x7f0000000380)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 14:12:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r2 = io_uring_setup(0x104c, &(0x7f0000001440)) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) rt_sigreturn() close(r1) close(r2) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x18) 14:12:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x10050, &(0x7f0000000840), 0x3, 0x521, &(0x7f0000000100)="$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") lstat(&(0x7f0000000780)='./file2\x00', 0x0) 14:12:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5\x00\x04\x00\x00u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,zn\x1c4\xaa\xc2<\xad\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xaf\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95\xf0\xb5G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\x9b\xc6\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\xf3kv\xdf\xf9\x91f\x11\x86\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\x02X-\xfc\xfd\xb8O\xc9y\x82\\\x9dx\xb2\x86 \x1a', 0x2) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x78) sendfile(r0, r1, &(0x7f00000001c0), 0x1) fcntl$addseals(r1, 0x409, 0x8) rt_sigreturn() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) 14:12:59 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x81, 0x75, 0x0, {0x76, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f497d049fb75f016bcaa6043859189a0484f83b61835272c6c0b9067c033b29f5865f1edae5de79b512bcf8d2a9f127f327e11552402ae76630"}}, 0x81) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:12:59 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup3(r1, r0, 0x0) write$cgroup_pressure(r2, &(0x7f00000000c0)={'full'}, 0x2f) 14:12:59 executing program 3: r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(r1, r0) readv(r0, 0x0, 0x0) 14:12:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001600), 0x0) r3 = dup3(r1, r2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f0000001b80)={0x2, 0x0, @empty}, 0x10) 14:12:59 executing program 0: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)={0xa6e40}, 0x18) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000000c0)) 14:12:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:12:59 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x82, 0x75, 0x0, {0x77, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d040000000000000000000000000070d4502d3dd15ffbd4d621068bfca19e922fb757988a7eb397c95b3bff648818ff8dc06d780fe410bcde08774e562519f9aafc66889eee22ab92360a5d14933a73756c12452bdb3e7738"}}, 0x82) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RLERROR(r1, 0x0, 0x15) 14:12:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) close(r1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) rt_sigreturn() syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000000c0)=0x0) timer_settime(r4, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 14:12:59 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 14:12:59 executing program 0: rt_sigreturn() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = io_uring_setup(0x75e3, &(0x7f0000000140)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = dup(r2) ioctl$TCSBRK(r3, 0x5409, 0x0) close(r1) rt_sigreturn() sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:12:59 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x63, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000010c0)) 14:12:59 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000004ac0)={'sit0\x00', &(0x7f0000004a40)={'syztnl2\x00', 0x0, 0x0, 0x80, 0x0, 0x1, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x1, 0x29, 0x0, @private, @broadcast, {[@noop]}}}}}) 14:12:59 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x45, 0x75, 0x0, {0x3a, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309ec290ef7d1c0f6d03c178e7dd934"}}, 0x45) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:59 executing program 2: r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 14:12:59 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000680)={0x4f, 0x75, 0x0, {0x44, "25f5b12db254a6d385c8be89b812f5a77682aa0c989b1925f65d153d3277202637c096bdcdda178167e9aa79416ce4f4a952507bdb03faf1adbf90ddd9fd183ca3d5eae4"}}, 0x4f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:12:59 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = dup(r0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 14:12:59 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0x0, 0x0) write$P9_RLERROR(r3, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) write$P9_RSTATu(r1, &(0x7f00000004c0)={0x3b2, 0x7d, 0x0, {{0x0, 0x25e, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1ee, '\x00\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x02\x01X!\x04\xe1[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0[\xd2;S*\xfc\xb1\xc9Q\f\xca\xd8\xda\x19\xf5\xcf\x13\x11@\x8e\xb9\xb2J\xec\xb1\x99\x95m\r\xe8\xb5\xf2{\'\x11+gUf\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\x00p\x13\x80\xdc\xd1d\xd2&\x98s\xb3K\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xfem\x1d0~\n\x83\x1c\xde\x9f\xb7pEC\x93k\xa0\x94\x93\x13aU=\x1eE\xe9w\x1f\xc8j<^\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xd6\xf1\xb3\xe3\xffc\xd5\xb4\xe6K\xcc~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee;/\xf6\x9f\xcb\x8ac#\xa2\xf7\xe6\x19\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80-\xe3:\xe0$\x00\x00\x00\x00\x00\x00T\x00\x00\x00\x00\x00\x00*\x9b\x99\x0e\x9a4\xa1\xb2^\xd2\x05P\x8b\xc2\x81\ag\x97U\xa0\x0e2\xbapO@\xbd\x1aq~\xb6\xc8\x7frE\x1d\x91*\x86\xabC\x1f\xb5\x8b\xf7\xc9\xa9\'\xf4\x7f\n?\xf3:\xf9\x9c\x88h\x9ck\x03\xf72\x7f\xea\x97/-K\x8d\xce\xe4dO\xbbx\xca\xb6\vd\x10\xef\xd2\a\xe1\x19\x9a\xff\x91\x04\xd0\x18w;\xf8\x0fAv\x13\x87\x9a8\xe6\xce\x8d\xc9\xd2l\xff\'\xe3\x8al\x03\xd2\'\x1a}\xa6>F4\xb32QC\x87iV\xe8\x9a\xff?\xe3\x85;\x04\xbdw\xcb\xf0\xac\x96/\t{l\x87O0fOEI\xf4\x11\xe2I\xc3\xa7\xfbmC\x98\xd0\x17\x16\x1bu\x89\xa9\xb2\x904\x1b\x80\xd6'}}, 0x3b2) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) rt_sigreturn() r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) write$P9_RAUTH(r6, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:00 executing program 3: r0 = io_uring_setup(0x1201796, &(0x7f0000000080)={0x0, 0x0, 0x10}) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x5451, 0x0) 14:13:00 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:00 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) write$cgroup_int(r0, &(0x7f0000000400), 0x12) 14:13:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x14}, 0x14}}, 0x4810) 14:13:00 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x105043, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)=ANY=[], 0x5c}}, 0x0) 14:13:00 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001080), &(0x7f00000010c0)=0x4) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) 14:13:00 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xd, 0x75, 0x0, {0x2, "25f5"}}, 0xd) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:00 executing program 0: rt_sigreturn() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigreturn() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:13:00 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup2(r1, r0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)) 14:13:00 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xbd, 0x75, 0x0, {0xb2, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280ecc846b7d1f7fabf9614b34419c2394cac12c3f8cf087045607edf5b5b1d81827247e7ec48d36e808d155fa8568c0de7bc129ed91c21ef6ab6ba061e10bf89b63718ce760a3dbb61032d3575eff8e55f8a0642b282da7cc79bd28b01930abdd6bd6eaa0c7a2ba68a1715868414"}}, 0xbd) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:00 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040), 0x4) 14:13:00 executing program 4: munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 14:13:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 14:13:00 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) 14:13:00 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x1e, 0x75, 0x0, {0x13, "25f5b12db254a6d385c8be89b81278a781e7af"}}, 0x1e) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000340), 0xffffff46) dup3(r4, r3, 0x0) rt_sigreturn() writev(r3, &(0x7f0000000340)=[{&(0x7f00000002c0)="c4", 0x1}], 0x1) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:00 executing program 2: pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000002100)={0x7fa, 0x7d, 0x0, {{0x0, 0x512, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf6, '\x16\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\x02\x01X!\x8f\xf6[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0{\xd2;S*\xfc\xb1\xc9Q\f\xca\xd8\xda\x19\xf5\xcf\x13\x91\xd1\b\x90>\xa3\xf6\xb4\x1b@\x8e\x06\x9d.\xe0\x95)\x04\x00\x00\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xfe\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xd6\xf1\xb3\xe3\xffc\xd5\x1a\x88K\xcc~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee\xe6\x18\xfd|\xe1\xd7\xdd\xa1=\xa8D=\x13}\x9au_\x1c\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80-\xe3:\xe0$\x00\x00\x00\x00\x00\x00\x009XR\xf2\x1e\xcas\xd0\x80\x87=\x01h!\x9b\x04\x05\r\xdb[', 0x29c, '\rI`\xeb=\xcf\xd0\xc70\x00\x88l\xad\x0fO[5\x9a\xea\xa3\x7f\x1f\xce\x18j\x18\t\x00\x8c\nY\xd4\x10;\xc32\xcb\xc6\xf3a,\xdb(\xf4S_\x9c\xe1p%\xe6u,\xbf\xbf\xa6UK7K\xac\x03\xbe\vI\x06\xa2H\xbd\xbej\xdb\xfa\x83\xe61\n\xfc3\xec9\x90\xd9\x04\xea\x00\xea\x00Y\x99\x15q\xc9\x04\v\xe7\xa3\xfa\x99g5\x85kd\xb7\\~Lx\xdcL\xc3\xd82\xc5\xf4)b\xe1*\x96\xcajX |\xb4\xc7_\xd8\x94\xbd\x9e\x96W\xc2\xeb@\xa7g\xe8\x00\xb3Q\xa4\xedp\x84\xdf\x0f2\xa3\x85e&\xf5s\x98\xb3\x94\xe0\xbf\x02\x82\xa4kd\xa0\xc5`\x05,Fg\xba\xbb\x00n\x12,\x1b\v\x16_*\t\xb4\x8e\x04\xce\x06Q\xd5\x81\x91\xec\xa3Nn\xd6\xf4\xfd\x82Q\x14\bj\x89X\xe4\x03\x19%\x1c\x9a\xd1\x1auC\r\x92?\xb8\xeaf\xb7=6UB\x1f \x00\xca\x7f\xee\x928\xe6\x84\x91\xee\t2W\x11\xc2\xdf\x03\xd0\xa2^|\xb9\x93-\x99(\x84\x10\x874\xf9\xf1\x12\x89\xba\xd3\xc7\xbf\x80\xbf\x18@\xfb\xd1\xa41+.B\x93\n}\x91\f-\xd4\xd4\x14kq\x9b\xc8\xb7\xb7\x01y\xe3r\x939\xfd\x15\xd3\xb6\x8a\x1a\x1bP\xdd\xe9S\xdb\x00\xf6\xa8;n#`\x15,)B\xbd\xd7\xcb\xe2n1\xfb\xb7\xebC\xcf\x8f\xe52i\xdf\\\xf3n\x99rr\xb6\xcdY\xa3\xbb\xaf\x1a\x9f\xbcN\xad\xc02\xb3V\xe5\xa7\xf2s\x00'/668, 0xef, 'C\x01\x02,\x9e#o\xc0\xad\xf1\xa0\x80X\xc5\x0f\x05g\xcbKq\xd9\x00\xdc\xda7\xc1\a\x9dW\xfa-;\x14\xa9\x82\x86\xeda\x1d\x99\xbb@!j\x9a\xf7vv\x17P\xddr\xc4\x8a\xd5O\xbcH\x1e&@\xbaE\x80\x8a6\xe0\x1d\xf6!\x06,\xa9\xf5\xe4W\x94Vy\xef\x83\x8e\xf0<\xa5%\xffMA4\x04g\xde\xfd93\xc5/\xb7\x84\x8f\a\xb7{\xc3\n\xf0\xcc@\xba\xea\xe0\xd9\xf63\x87\xc9\xb7~\xe8\xe4\xe4\xf8\xa1\xe7\xf1\xde \x0f\x84\x11\x8f\xf3z\x86\xa8\xae\x81\xb9B$\x00ym\xeaF\x1f\xd7O_\xcc\xf8\xec=S\x9e2\xf2L\xf6\xfeu\xe9\xab\xe0\xdd\x11N\x87\xe0s\x9d\xe4\x91N6\xea\n)O\x8a\xceB\x9e\x96\xb1\xd7\x8a\xd9\x12\xce9\xe4\r\x98W\xbdd\xa7f\x83\b\x9b\xc6\xbe\x1b\xebC\xc2\xb7\xfeQ\xaf\x8bl\x04\xdaO\xeaWk\xb0q}\xe1G\xae\xf7<\x19\xdea\x8d\x8c\xb1\xba9\xde\x98', 0x5e, '\xb7\xc6#Jj\x81\x8e\xaa\x8b\x83\xc3R\x18\\\x87\xe7\xe6O5I\xdf\xe7\x90\xfe\xd3\xf3\xc53\xa2\xffd\x99_d\x85JJ\x03{\xc7\x80?`\xc4~E\xa8M\x8beXv\xcb`\t\xedc\x93k\xd1Kk\an\x14~UPMv\xe4W\xd89\x82\xd7p\xb6\x1bN~\xd0\xe5\xcf}fT\xe6\xbch\x85\xbf\xf5b'}, 0x2d3, '\xec\xf1\x92g\xa0\xe9@\xbd%\xfc\x01}\xe2\x16H\x99D-\xb7|\xf7i\x11<[\x88\xe7;/vo\'\x86\xf8\xae\x16\xdb\xba\xee\x91]\x13>\b&y0\b\xcb\xea\xa0\r\x00\x00\x00\x00\x00\x001\x05\xd2\aL\x88\xb9\xb3\xfc\xc7\xb5\x06\xb0\x14\xee\xb8$\x9c\t \"\t\xbeNJ\x907\xeee\xa8-\xfdy\x95\xbb\xf84\xce\xbe\xde\xf3\xba8\xfd6\xf2\b\xfbz\xe8\xe5\x85\x84\xce\x01\xc6\x94\x12\xe8\x9f\xfcb\xba&d\x12\\bu\x9f&Z\xff\xf6\x02l\xa4\xb2K?\b\x1b\x91\xb4\x98\xf0\xe3\xb7\x8b\a\x00\x00\x00\x00\x00\x00\x00\xb6\xeb>t\bc\xf5\x88\xfb\xe9mmx\xcak9\xe1!\xafW\x87\x13!\xdcLO{\f\xd5\xfe\xaf\xfc@Lh\\\xa0\xe9\xd6\xf2\x1d4\x87\\\xba\xd0O\x817\a\"\xb1\x90/\x13:,m\"E\xe3r\xcbzV\xb10\x9b\xfcq\xcc\xec_\xa1\xf7\x01fb\'\xe7\xce\xb1\x81\xcd#\xdeP\xb9%\x97_,S\xce\xfc\xb9\xfd\x8b\xca\xbc\xc4+\xa1{hg\xc4\x98\xee\'\x15LDY\xae\x11\x1b\x19\x82\xf9\xcf\xd0\xd2\xdeQW\x00\x00\x00\x81H\x00\x00\x19\xden%rbT+\x90\ruZ\xb0\xf0\x00o\xcay}\xdb\x92\f\xcf\xcd\x9d.H-V\xe0T}\x05G%\x8b\xe0\x9f\xa82\xc3b\xf9!\x17\xc7$\xf4\vG\x92!&qZ$f\xc1l\xf7\x96\x98\xc2\xfa\xb3\x88\xb7GK\xff\xa2\xd8s\"\x96\xd7\xb7\xb4\xff\xd9\x7fK\x95j\xa68\xd1\x03\xc5\xf0\xd1\ah2\xc6\x8c\x87|\xb2\xaf\xc4xGy\xab\xbc\nhQ*\x00\xa7\x0e\xcb\x92<=\xfb \rH=8\xae\xfe\xbc\x00\x00\x00\x00\x00\x00\x00|\xa4\x1b\\\x19\x03K\xb1\xd2\xf8\xd3gA\x01\x92\x89\xce\xd8\xa5\b\xf20\x95\xd0\x0e\xa2y\x19T\x8f\x8dd\xf0\xc5B\v)j\xf2Dw\xd4\xd1\xde0uu&\n1\xdc%i\xba\xa8\xc5\x82b\xc7\x9d\xa3_\xf0\xf6`*\xef\x13\x9b\x17\a!\x1e[tSH\x00\xc8k\b<\x8d\x99\xb2V\xdd\xbe\f|mY#\xb3}m\xc7\x92\xc7\xd4\x80T\xa4\xd9\xde\xd2\xf3v\\\x1e\xa7\x9a\x87*\xfd\x1da\xbd7QH\x8a\x1co\x9e\x99]\x05(\xe3\xf2\x03\xc2\xd6=a\x80ip3R\x04\x03N\xben\xc9\xb1\xca\x93\xad\xe9\xdc\x84\x7f^.\\T\x11\xb0N*\xc5\x9dy\x1a\xb3j\xc79\x18\xd8\xb2\xdb\xd1\xeb)\xc9\xef\xd7\x01\xe3\xa9\x11xoQ\xecto0\xf8D\x1b\xd5*d(D\xad\x0f\xfdL\xfa\r\x00\x06\xd2\xb6H[\x7f\x8eN\\e\xb9\".\xa1q\xdb\xdb(\x0f\x82\x8aBL\xbesH\xc87\xd1\x13\x1b\x9e\x8d\xa4\x04\f^\xbf\xca7\xdf\xc3\x82\x13\xd4&\xceh\xbaq\x00\x9a\xb6\vf\xd6+Vg\xe7\x14\x81\xaf\xc8\xfdX\xf6~\xc9pC\x97\xa63fO$#\xb8W\vN\xfe\xec\x93\xc9\xa8 \xf1\x1b:\x00\xfd^v'}}, 0x7fa) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, 0x0) gettid() tkill(0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:00 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000680)={0xa0, 0x75, 0x0, {0x95, "25f5b12db254a6d385c8be89b812f5a77682aa0c989b1925f65d153d3277202637c096bdcdda178167e9aa79416ce4f4a952507bdb03faf1adbf90ddd9fd183ca3d5eae4656238177bb5b88d76d85ceb4836f8f91b2d4f8e4c9c88bfbbe9938cd64340aad427c25e3657acd8c4a263dad2c9044c2f67c61b55ed66a0584fa0f81450e84d2e6328b7dde02a1d55c5b9daefb5560472"}}, 0xa0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:00 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000000)={0x8c, 0x75, 0x0, {0x81, "2714b22db25605000000be89b81278a78133cb12a456ba8907f728ed77d7d945fb7324e1b433a05884fadebf3e6787f6dba5de52513db73fadd23421decc31db9dad3ec138294a30233133cf84770e9247bec04c382e2c12b8848cf88e6b0aa4c11c3015c45c2302767d4b98a922c3c4616dcf85dc488fb032ee2a2ffd88273b20"}}, 0x8c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$VT_GETMODE(r3, 0x5409, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:00 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x85, 0x75, 0x0, {0x7a, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0e5a5d52948341ddfc17322b1871ddb916378df6fa7de595f61c69280f9c846b7d1f7fabf9614b34419c2394cac12c3f8cf087045607edf5b5b1d81827247e7ec48d32e8040d0ff676cc0"}}, 0x85) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0x7, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:00 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$packet(r0, &(0x7f0000000000)='A', 0x1, 0xd6444f78365f56d0, 0x0, 0x4b) 14:13:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x10}}) 14:13:00 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 14:13:00 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0xc6, 0x75, 0x0, {0xbb, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d040000000000000000000000000070d4502d3dd15ffbd4d621068bfca19e922fb757988a7eb397c95b3bff648818ff8dc06d780fe410bcde08774e562519f9aafc66889eee22ab92360a5d14933a73756c12452bdb3e7738afaa42e15dd527c4ac380e21c0ca8dfa77493118246139e4239af5255ebdcacdd59f46b4175b5e1ca4518b9161dbb610d7be18bbac2cdcb6c3ff5313d71dc7949c6a2d1f"}}, 0xc6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RLERROR(r1, 0x0, 0x15) 14:13:00 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) dup3(r1, r0, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ec0)=[{0x0, 0x10}], 0x1}, 0x0) rt_sigreturn() writev(r0, &(0x7f0000000800)=[{&(0x7f0000000240)="c4", 0x1}], 0x1) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) write(r0, &(0x7f0000000280)="b1", 0x1) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) statx(r3, &(0x7f0000000040)='\x00', 0x1000, 0x0, &(0x7f0000000080)) 14:13:00 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000003200), 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:13:00 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x26e1, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) rt_sigreturn() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) accept(r3, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:00 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x25, 0x75, 0x0, {0x1a, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e0"}}, 0x25) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:00 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x2b, 0x75, 0x0, {0x20, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04"}}, 0x2b) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x33fe0}}, 0x0) write$P9_RSTATu(r3, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000440)={0xffffff73, 0x7, 0x0, {0xc, '/&\xff\x00\x00\x00Y\xcf\x101@/\xaa\v\xba(\\\x8f\xc0\xbcB\x12\x92=s Y\xc9\x83\xd8X\xaa\'\xb1\xa5\xb7\x8a\xde\x96\v\xdc\x05\x9c\x93\xee\xae6+\xbcVub9\xf9\xf7y\xb1`\x87\x86\xe2\x16m\xd4\x1c\x9cr\xbf\xd7\xfc(n\xb9\x00b\"LF\x92K\xc0\x99\x9c\x05\x88\xbe>sn\x9a}[\xea\xed\xf6^\x89H\xa3\x9b\x16\xaf\xa0\xa5\xf1\xb6\xa1\xa2\x986\x8c\x01\xa1\x13\xc2\xd4\x18\x99\x18r\xf6\x19\x81\xf0\x87x\xc8 \xbf\x99\x87\x87l\x00V\x01%\f\f\x8a\xa4\xb9\x11s\x9a\'X\xff\xc2w\x18\\HM:\"\xc5\xcd}$\xc1\xbf\xdc\t\x00\x00\x00\x00\x00\x00\x00l\xe9\xe3\xb9\xf9\x88U\xb5g\x98\xfex\x94a\xf5\xd3\r\xbb\xd7\xce\x8c\x96\xd9\xcfY&\xa6\x82\x12`D\xdd.\x0e\xf9\t6\x87LT\x1ai*o\x84$\xcdG\x13\xadd\x8e\x8a\xcd\xe0\x02`\xff[\xe9\xbb\xcc/\x91\x06\xbc8\xba\xd3Jc\v\x98b\x88\xcd\xbdo\xe2\\\xbc\x05\xd1\xf8<\xf53\xa6=\xf4\xad\x8b\x1c\xdf\xe2\x9e\xe9\xbd\x1c3;\x9amJ\xa0\x192\xbf=u\xf4I\x9a\x8dSY\xd0\xa3\xda!q\xfcXg\b\xcc\xf6Qk\xb8\xc6\x89\"8G\'\xad>2LR\x0f\xc2\xe4n?\xad\xb4?\xbc\xf6\x1a\xa8q[\xd4e\xc85\xaf\xd1y\x9d\xee}P\xbc\xa0o\xd5\xfe\xb1\xdf\xb3\xfeW\xb51\xd4\x1a\xc2\x16\x97\x9a\xc6lN\x9c\x8d{Y\xa2\xfa\xa5,\xbe\x97'}}, 0x10) 14:13:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) close(r0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 14:13:00 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rt_sigreturn() r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRK(r2, 0x5409, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000280)=0x80) close_range(r4, 0xffffffffffffffff, 0x0) 14:13:00 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x50, 0x75, 0x0, {0x45, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a7488"}}, 0x50) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:00 executing program 3: openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) openat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) 14:13:00 executing program 0: r0 = syz_io_uring_setup(0xed2, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup3(r1, r0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000003c0), 0x0, 0x0, 0x0) 14:13:00 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000480)={0x29, 0x75, 0x0, {0x1e, "25f5b1eb6c623853085589df489a735b2b01b254a6d385c8be89f81278a7"}}, 0x29) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000340), 0xffffff46) r5 = dup3(r4, r3, 0x0) rt_sigreturn() write$P9_RLERROR(r5, &(0x7f0000000040)={0xc, 0x7, 0x0, {0x3, '^\xb3*'}}, 0xc) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:00 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) r0 = socket$nl_audit(0x10, 0x3, 0x9) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) 14:13:00 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x35, 0x75, 0x0, {0x2a, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400"/42}}, 0x35) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:00 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:00 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0xfffffffffffffff9}) 14:13:00 executing program 2: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000080), 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 14:13:00 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x8000) 14:13:00 executing program 0: r0 = openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)={0x1210c1}, 0x18) fsetxattr$security_ima(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 14:13:00 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 14:13:00 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) write$P9_RSTATFS(r0, 0x0, 0x0) 14:13:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x20000000) 14:13:00 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14}, 0x14}}, 0x200000c0) 14:13:00 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x32, 0x75, 0x0, {0x27, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c"}}, 0x32) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = eventfd(0x0) read$eventfd(r3, &(0x7f00000000c0), 0x8) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:00 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0xbc, 0x75, 0x0, {0xb1, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309ec290ef7d1c0f6d03c178e7dd934cf77312873cf98c3825b097b45c0122ca4c141103a77f236df342306dd258be938f39409eaf669b34f95ef646e9ed3a81de101b7c14468cf871c019c864f205a3bf5ed7091d7d162944bb4c948ce4007e0e7745a8efb9721129595d7f8289abc322a77d99a639d2a5c824254a91c1fc2befe190ae956e4"}}, 0xbc) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:00 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) 14:13:00 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) fcntl$setflags(r0, 0x2, 0x0) 14:13:00 executing program 3: setreuid(0xee00, 0xee01) socket$packet(0x11, 0x0, 0x300) 14:13:00 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x5451, 0x0) 14:13:00 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f00000009c0)={0x4fd, 0x7d, 0x0, {{0x0, 0x46c, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xe6, '\x00\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x0279a\x95\xe1[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0[\xd2;S*\xfc\xb1\xc9Q\f\xca\xd8\xda\x19\xf5\xcf\x13\x11\xd1\b\x90>\xa3\x00\xb4\x1b\xaf\x9e\xdbM\x17@\x8e\xb9\xb2J\xec\xb1\x99\x95mgu\xf3s>\x9f\xaf\x19gUf\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xfem\x1d0aU=\x1eE\xe9w\x1f\xc8j<^\x94\x82\x01\x03\xa5\xbcpc\xaaBs\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xd6\xf1\xb3\xe3\xffc\xd5\xb4\xe6K\xcc~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee\xe6\x19\x10]\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80-\xe3:\xe0$', 0x6c, '\xf1\x96\xc9\x05\x00^\x98\xd7\x13\xdb-\xb4\xb9Qc\xf1\xfa\xe3\x91&\xaf\x96\x15\xcc\xfb\x9eC\x97f\xfd\x97@.!\xf8\xc4vf\xcb9{/#@)^\xe25\xf5\xe84\x02;,<=J\x8do\xc9kk\xf2U\xf7|\x91u\xb3\xa38u\xa31E\xa1\vSwQ\xee\xcfb\\\x109\x82\xe6\x03<\x14I\xff\x0f\xaa\x9e\fFq\x832\x15\xedd\xc5\x01\xcah', 0x36, 'C\x04\x00\x00\x00F*\xa5CJ\x00\x00\x00\x00W\x9d\xd0\'P\xf9\x10,\xd1\xc2N[_!\x80\t\xf44BC\x11\xe3\xa8p\v\xbb\n\xc9\x11\x81\x95\xe3\x11\xe3]\x7f\x8c\xa0)\xf3', 0x2b1, '\x8a\xb8\x8a\xba\xbd\xc7\xf9\xa5\xdb,\x03x\xc1hNa,\xbaX \x8cx\n\xd7\t?t\xc9\xa6\x8f\xa9Y[?\xd2\a\xe6\x16\x9eD\x94\x14h\xd1j%\xba\x1e}\xf4\xeb\xab\x9b\x18U\xc8\xf7h\b\x92\x1b\xcf\xeb\x14\xf3]\x15:\x96\x00\x00\x00\x00\x00\x00\x00\x80ix\x9eK\xce\xa4\xb4\x87\xf2\xac9\rH\xe5\xcd\\\x17\xd8\xec\x0f)\xca\x99j\xf4\xa9\xe3J\xbcF^\x87\x12\r`\x97\xe7Oa\n\x8eun\xd5/\x97h\xe6.\xd9)/Xj\xab\xbaDe3\xcf\xc0\xf0\xc0\xc4fL\xa7\xef\xed\xa5\xb2\xc5\xa8J\"\x96`\xc2\xe8w\x84F\xbe{\xedo\x8b\xf5\xd7\xde\xd2E\xe2\xb6\x10C\xdb\xf09\x7f8\xfcZ\xe3j\x93\'R\xf4\x1f\xde\xb5\xc5\xdb\xf2\xba\x1f\x84\xeatb\x93\x17\x93\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00)n\x8e\x10\x05\x9c4\xaek\xc9\xa6\xe2Q@\x00\x00\x00\x00\x00\x00\x006g\xa6\x03\xb4\x8e\x9d\x80\x91\x85\xcf#\xe0N\xe6Awm\xdd\xb5\x04\x18(\xf6t<\x90|\xb4\xf4/S\x96\xe3\xb8a\x97\x06\x161ya\a)q\xec\xea!\xce\xdep\xfd\x9be\xd5\xc4\x89\xb4M\xe6H\x99\xc7\xfdF\xc7M\xff\r\x17\x97\xb3\xca\x19\x89\xd3N\x0f6\x81\xcc\x1b\xa5\x04,- \x05iO\xe4{\xf1\xd3n=nM\x03\xa4\x1c+G\xd7\xacra\x01\x86~ \xda\xe7-g:\x04:b\xb9\x80\x11?A13U\xef\xd4\x9f\xf3\x06CS\xa89\xe8\x85iwX^\xc3\xb1\xcek\xf5\xad\x8eu\xbd\xa2Q\xa6\xb5\xeeBU\'\xb0Q0g:\xfb\xaex\x85\\\x7f\xe1\xa6\xdb\x10\x9d\xb4~N\x92\xab\xa0\x83\x13\xa3|\x83\x8d\x1f\x12\x05\x82b\xcc\x99\xb0>\xf5`\x0f\xe4\x85 `\x9b\xea\xa2\xf2\x15\x8e\xf3w\x1e\x86\v\xf0\x1f\x95\xcaF\x93\xe6\xbfDB\xd3\xce\xfd\xdc\xb6\xb40\xa0\xca\xba\x92|\xdfi\xb9u\xc9fR\x86khn)\x9b\xed\xe6\f\xaf\xf4WH\xe3\xb2-\x99Dr\xa4\xf0\x90#W\b\xec\x83\xda\xc7\x9fq\xc4\x99\xe5\xaf\xe3\x80\xe7J\xba4I\xecs~L\x16Q?\x8d\x18\xc9\xbc\x9e\xacP\x15A$\x00\x13p\xe3p\x1d\"\x98Fr\x14\x9b\xfa1\xc93>\x17\xa1N0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x7c, 0x75, 0x0, {0x71, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f497d049fb75f016bcaa6043859189a0484f83b61835272c6c0b9067c033b29f5865f1edae5de79b512bcf8d2a9f127f327e11552"}}, 0x7c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340), 0xffffff46) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:00 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) 14:13:00 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x49, 0x75, 0x0, {0x3e, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa06"}}, 0x49) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:01 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000680)={0x44, 0x75, 0x0, {0x39, "25f5b12db254a6d385c8be89b812f5a77682aa0c989b1925f65d153d3277202637c096bdcdda178167e9aa79416ce4f4a952507bdb03faf120"}}, 0x44) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:01 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x23, 0x75, 0x0, {0x18, "25f5b12db254a6d385c8be89b81278a781e7d164c1d20000"}}, 0x23) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x33fe0}}, 0x0) write$P9_RSTATu(r3, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000440)={0xffffff73, 0x7, 0x0, {0xc, '/&\xff\x00\x00\x00Y\xcf\x101@/\xaa\v\xba(\\\x8f\xc0\xbcB\x12\x92=s Y\xc9\x83\xd8X\xaa\'\xb1\xa5\xb7\x8a\xde\x96\v\xdc\x05\x9c\x93\xee\xae6+\xbcVub9\xf9\xf7y\xb1`\x87\x86\xe2\x16m\xd4\x1c\x9cr\xbf\xd7\xfc(n\xb9\x00b\"LF\x92K\xc0\x99\x9c\x05\x88\xbe>sn\x9a}[\xea\xed\xf6^\x89H\xa3\x9b\x16\xaf\xa0\xa5\xf1\xb6\xa1\xa2\x986\x8c\x01\xa1\x13\xc2\xd4\x18\x99\x18r\xf6\x19\x81\xf0\x87x\xc8 \xbf\x99\x87\x87l\x00V\x01%\f\f\x8a\xa4\xb9\x11s\x9a\'X\xff\xc2w\x18\\HM:\"\xc5\xcd}$\xc1\xbf\xdc\t\x00\x00\x00\x00\x00\x00\x00l\xe9\xe3\xb9\xf9\x88U\xb5g\x98\xfex\x94a\xf5\xd3\r\xbb\xd7\xce\x8c\x96\xd9\xcfY&\xa6\x82\x12`D\xdd.\x0e\xf9\t6\x87LT\x1ai*o\x84$\xcdG\x13\xadd\x8e\x8a\xcd\xe0\x02`\xff[\xe9\xbb\xcc/\x91\x06\xbc8\xba\xd3Jc\v\x98b\x88\xcd\xbdo\xe2\\\xbc\x05\xd1\xf8<\xf53\xa6=\xf4\xad\x8b\x1c\xdf\xe2\x9e\xe9\xbd\x1c3;\x9amJ\xa0\x192\xbf=u\xf4I\x9a\x8dSY\xd0\xa3\xda!q\xfcXg\b\xcc\xf6Qk\xb8\xc6\x89\"8G\'\xad>2LR\x0f\xc2\xe4n?\xad\xb4?\xbc\xf6\x1a\xa8q[\xd4e\xc85\xaf\xd1y\x9d\xee}P\xbc\xa0o\xd5\xfe\xb1\xdf\xb3\xfeW\xb51\xd4\x1a\xc2\x16\x97\x9a\xc6lN\x9c\x8d{Y\xa2\xfa\xa5,\xbe\x97'}}, 0x10) 14:13:01 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x48c0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x8000000) 14:13:01 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/nfsfs\x00') mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 14:13:01 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x41, 0x75, 0x0, {0x36, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50"}}, 0x41) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:01 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xfffffe1e}}, 0x0) 14:13:01 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r4 = dup(r3) write$cgroup_pid(r4, &(0x7f0000000080), 0x39) sendfile(r3, r4, &(0x7f0000000100), 0x100000000006c03) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:01 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x25, 0x75, 0x0, {0x1a, "25f5b12db254a6227ff0e55d8c2ea55180e463e354b0c498fb7e"}}, 0x25) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x2e, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) write$P9_RWRITE(r3, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:01 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0xe8, 0x75, 0x0, {0xdd, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309ec290ef7d1c0f6d03c178e7dd934cf77312873cf98c3825b097b45c0122ca4c141103a77f236df342306dd258be938f39409eaf669b34f95ef646e9ed3a81de101b7c14468cf871c019c864f205a3bf5ed7091d7d162944bb4c948ce4007e0e7745a8efb9721129595d7f8289abc322a77d99a639d2a5c824254a91c1fc2befe190ae956e442902a3e8b9fe8d1986dd0aebb88d61fa8b41b50d84becc4ec8e4038fa6cb39c0d622641a6308c704939dae6"}}, 0xe8) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 14:13:01 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) read(r4, 0x0, 0x2006) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000003a80)) r5 = dup(r4) rt_sigreturn() ioctl$RTC_UIE_ON(r5, 0x7003) write$P9_RREAD(r1, &(0x7f0000000980)={0x7d, 0x75, 0x0, {0x72, "1039de23002db6eef7d1b1d9a91790a9de1362da384df24f3d76719dbeaac1d533ad3b59b0529d9758acec47b7b021b23137d604d8a5e7cd4dc7260601685a408cc14a4c3f8f4b7bb9e8a4beacb6f05c47859f9cdb02de311c44de083fb6f187587fd0f4d02acb0cac43adc7a84e88100f10"}}, 0x7d) 14:13:01 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup2(r1, r0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000000c0)) 14:13:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0xb, 0x0, &(0x7f0000000040)) 14:13:01 executing program 2: socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) memfd_secret(0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/snmp\x00') socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) write$P9_RSTATu(r1, &(0x7f0000000940)=ANY=[@ANYRES32=r2], 0x473) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) rt_sigreturn() rt_sigsuspend(&(0x7f00000000c0), 0x8) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:01 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fcntl$setsig(r0, 0xa, 0x0) 14:13:01 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000000c0)={0x2a, 0x75, 0x0, {0x1f, "b850e64e921fe5005f876f0e6db32a71f600433f0b44b8ac08a5ad2b422387"}}, 0x2a) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:01 executing program 4: open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x2, {0x1c}}, 0x204a03) 14:13:01 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x5421, &(0x7f0000000000)={0x6, 'geneve0\x00'}) 14:13:01 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCGSTAMP(r0, 0x5450, 0x0) 14:13:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x20000000) 14:13:01 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCEXCL(r1, 0x540c) 14:13:01 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000ec0), 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 14:13:01 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x48c0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) getsockopt$sock_buf(r0, 0x1, 0x27, 0x0, &(0x7f0000000100)) 14:13:01 executing program 3: r0 = memfd_secret(0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x5450, 0x0) 14:13:01 executing program 2: pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000200)=ANY=[@ANYRES32=r1], 0x4d1) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r4 = dup(r3) write$P9_RSTAT(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB='H'], 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x11, r3, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:01 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) dup2(r2, r3) write$P9_RCREATE(r3, 0x0, 0x0) 14:13:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) r2 = fcntl$dupfd(r1, 0x0, r0) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = gettid() tkill(r3, 0x14) 14:13:01 executing program 0: r0 = openat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x22240}, 0x18) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 14:13:01 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='maps\x00') fcntl$lock(r0, 0x6, &(0x7f00000003c0)) 14:13:01 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x805002, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2021021, 0x0) removexattr(&(0x7f0000000340)='./file0\x00', 0x0) 14:13:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x478d, &(0x7f0000000140)) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x33fe0}}, 0x0) close(r0) socket(0x2, 0x3, 0x3) close(r1) 14:13:01 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0x1d, 0x75, 0x0, {0x12, "25f5b12db254a6d385c8be89b81278a781e7"}}, 0x1d) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_udp_int(r1, 0x11, 0x0, 0x0, 0x0) 14:13:01 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) 14:13:01 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0x3c, 0x75, 0x0, {0x31, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7"}}, 0x3c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:01 executing program 1: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, &(0x7f0000000340)) r0 = mq_open(&(0x7f0000000480)='team0\x00', 0x843, 0x80, &(0x7f00000004c0)={0x11, 0x6, 0x401}) cachestat(r0, &(0x7f0000000580), &(0x7f00000005c0), 0x0) 14:13:01 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x6c, 0x75, 0x0, {0x61, "25f5b12dc45605000000be89fb42c7882f892ef38ad44019ca72c1a7554b887b0e472b7c32586c4358e4da32696976c7d8b61b2503c9c782d973147e99ce650eb8ab36486a190cd81e6e6c85ceda1cacb3086d99aaedf35d5634052cae47dec860"}}, 0x6c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x33fe0}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDFONTOP_COPY(r1, 0x4b72, 0x0) 14:13:01 executing program 3: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000280)='./file0\x00', r0, &(0x7f00000002c0)='./file0\x00') 14:13:01 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigreturn() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 14:13:01 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002000)={&(0x7f0000000540), 0xc, &(0x7f0000001fc0)={0x0}}, 0x0) 14:13:01 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x89, 0x75, 0x0, {0x7e, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f497d049fb75f016bcaa6043859189a0484f83b61835272c6c0b9067c033b29f5865f1edae5de79b512bcf8d2a9f127f327e11552402ae76630b4cd96eda88f3dc9"}}, 0x89) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:01 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 14:13:01 executing program 0: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 14:13:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280), 0x7, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000040)) 14:13:01 executing program 1: r0 = fsopen(&(0x7f0000001140)='ramfs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x841, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='-\xd6+[\\(\x00', &(0x7f0000000140)='./file0/file0\x00', r1) 14:13:01 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) recvmsg$inet_nvme(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="46fd"], 0x15) 14:13:01 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x48c0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r1, r0) ioctl$TCFLSH(r0, 0x540b, 0x0) 14:13:01 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x14, 0x75, 0x0, {0x9, "25f5b12db254a6d385"}}, 0x14) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r4, 0x0) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c40)={0x14}, 0x14}}, 0x8010) 14:13:01 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00') close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RXATTRCREATE(r0, &(0x7f00000001c0)={0x7}, 0x7) 14:13:01 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x1) 14:13:01 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x8f, 0x75, 0x0, {0x84, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f497d049fb75f016bcaa6043859189a0484f83b61835272c6c0b9067c033b29f5865f1edae5de79b512bcf8d2a9f127f327e11552402ae76630b4cd96eda88f3dc94f70eeb427f8"}}, 0x8f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000001480)) 14:13:01 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x90, 0x75, 0x0, {0x85, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f497d049fb75f016bcaa6043859189a0484f83b61835272c6c0b9067c033b29f5865f1edae5de79b512bcf8d2a9f127f327e11552402ae76630b4cd96eda88f3dc94f70eeb427f86d"}}, 0x90) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 14:13:01 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x50, 0x75, 0x0, {0x45, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280"}}, 0x50) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:02 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xb8, 0x75, 0x0, {0xad, "25f5b12db254a6d385c8be89b81278a781e7d1645a1c1a78000000000300004062f0dfc17322b1871ddb916378df6fa7de590000c69280f9c846b7d1f7fabf9614b344000000000000000000000000000053ad4d5205cd4686d67f00000000000000e2b54a8dac7ef6f3733735f72af35a930447764c9d003416b1a47deff227f9493a38aed6d413bded64dbea5954c64c8719b21c4d118d0af4ec011b513ec9655ac7c9f11fafd5176d48e0b6"}}, 0xb8) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:02 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x11, 0x75, 0x0, {0x6, "25f5b12db254"}}, 0x11) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 14:13:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 14:13:02 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x1e, 0x75, 0x0, {0x13, "25f5b12db254a6d385c8be89b81278a781e7d1"}}, 0x1e) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001740)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:02 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r1, r0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 14:13:02 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x4b, 0x75, 0x0, {0x40, "25f5b12da264a6d385c8be89c88483459b8a8fb7e631fcbe609d840a5a0df5af2862ce60a7377ed49dd656494ede7f514117f1fbd0eb98d63a4f3fc5dd131bbf"}}, 0x4b) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) recvmmsg$unix(r4, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:02 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x41, 0x75, 0x0, {0x36, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b187"}}, 0x41) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x50}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:02 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0) close(r0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 14:13:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001280)={0x14}, 0x14}}, 0x804) 14:13:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000300)={@rand_addr, @multicast2, 0x0, "a8273b91acb7b604b03a4d9e2600b5e004a783684f048fd15e20d4c195b5ea6c"}, 0x3c) 14:13:02 executing program 3: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2845004, 0x0) mount$nfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x841828, &(0x7f0000000000)=ANY=[]) 14:13:02 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x42) write$P9_RLOPEN(r0, 0x0, 0x0) 14:13:02 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x20, 0x75, 0x0, {0x15, "25f5b12db254a6d385c8be89b81278a781e7d164c1"}}, 0x20) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:02 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000000)={0x23, 0x75, 0x0, {0x18, "25f5b12db25605000000be89b81278a78159fa98ba58cb9e"}}, 0x23) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:02 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xe7, 0x75, 0x0, {0xdc, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000010e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb919b9841eea7de595f45275543ffcc1b4b48320e9e89de166dacee2ef3f3132e2f808eb1468156d2d4c728ca98cb361d417b41bbec766f1be5b9e893f49198af1b1cdc62f0290a4d5cfa6d5b8842613ffb2750c7f8056cb9b594a3a0984894505f93686c6f8893300bccd8d28b213257a328799916ab11cf6df73140f82b79d946bee61a6b5f6afeeb293446cd1c102374108c2947cbcdcb0700"/220}}, 0xe7) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7}, 0x7) 14:13:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0) 14:13:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 14:13:02 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void, @void}}}, 0x14}}, 0x0) 14:13:02 executing program 0: pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff}, 0xb82e336200000000) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = dup(r1) ioctl$FICLONE(r2, 0x5451, r0) 14:13:02 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_SEND(r0, 0x5450, 0x0) 14:13:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000004c0)) 14:13:02 executing program 4: pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb82e336200000000) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 14:13:02 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000680)={0x6f, 0x75, 0x0, {0x64, "25f5b12db254a6d385c8be89b812f5a77682aa0c989b1925f65d153d3277202637c096bdcdda178167e9aa79416ce4f4a952507bdb03faf1adbf90ddd9fd183ca3d5eae4656238177bb5b88d76d85ceb4836f8f91b2d4f8e4c9c88bfbbe9938cd64340aa"}}, 0x6f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={0x0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) dup3(r2, r1, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000340)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 14:13:02 executing program 1: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) 14:13:02 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000740)={0x23, 0x75, 0x0, {0x18, "25f0b12db254a6d385c8be89b81278a781e7d164c1d20000"}}, 0x23) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:02 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) 14:13:02 executing program 0: socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup2(r1, r0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "e63bfee4ce46ca7e3976510237beded227de2c"}) 14:13:02 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f0000000000)=""/118, &(0x7f0000000080)=0x76) 14:13:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) 14:13:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fstat(r0, &(0x7f0000000d80)) 14:13:02 executing program 1: r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) finit_module(r1, 0x0, 0x0) 14:13:02 executing program 4: r0 = eventfd(0x0) vmsplice(r0, 0x0, 0x0, 0x0) 14:13:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000400)={0xfffffffffffffffe, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14}, 0x14}}, 0x20004010) 14:13:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x5) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000300)) sendmmsg$sock(r0, &(0x7f0000001d00), 0x0, 0x0) [ 678.897160][ T1875] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:13:02 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) write$P9_RFLUSH(r0, 0x0, 0x0) 14:13:02 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 14:13:02 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='F'], 0x15) 14:13:02 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000004c0), 0x4) [ 678.984960][ T1875] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:13:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x88}}, 0x0) 14:13:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000000000003000000e9"]) r1 = dup(r0) ioctl$TIOCOUTQ(r1, 0x5411, 0x0) rt_sigreturn() socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) accept$unix(r2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:13:02 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x185043, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "a712ad707266eb48", "dae965196afa08bee98b01b1b29867c9", "6066900d", "2730eda524f66360"}, 0x28) [ 679.072478][ T1875] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:13:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r0, r1) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 14:13:02 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000001980)={0x7e2, 0x7d, 0x0, {{0x0, 0x60a, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf0, '\x00\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x02\x01X!\x04\xe1[\xe5\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0\x9a\x0f\xba\xef\'[\xd2;S*\xfc\xb1\xc9Q\f\xca\xd8\xda\x19\xf5\xcf\x13\x11\xd1\b\x90>\xa3\xf6\xb4\x1b\xaf\x9e\xdbM\x17@\x8e\xb9\xb2J\xec\xb1\x99tm\r\xe8\xb5\xf2{\'\x11+gUf\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x8b~\xc1\xdf;lp\x92mJ\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xfem\x1d0aU=\x1eE\xe9w\x1f\xc8j<^\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xd6\xf1\xb3\xe3\xffc\xd5\xb4\xe6K\xcc~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee\xe6\x19\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80\x00\x00\x00\x00', 0xa4, '\xf1\x96\xc94v\xbb\x92\x80\"{\xf6x\xa0\x80e\v>^\x98\xd7S\xdb-\x19=\x10\x9a\x99B8\x9eu%\xcd0Y\x01\\\"\"oI\xfe\\\xe8\xe9\x82\x11\x8d||\xa4\xfc\xdfN!\xaf\xc0\xadf&|\xd5?\x88_\xdd\xe6N\x9b7\xa6\x92\xd4@\xab\x11\xacv\x19\x12\x8c\x00\xea\xd2\xc2\xa0\xcc\xc4\x93)\xc6g\xe6^\xc9\xc7\xd3\x96\xdb+\fS-\xf3Md\xe1\xe3U2\vJ\xee{@\x06\xbd\xae\x1c\x1b\xef]T_\xbc\x10\x01\xaa?O\x10G\x19Q\x80\x97\xd27\xea\xd6N\xd2\xa1\x14\x8b\x1b\x05\x90\x9el,\xedDIr\x99T\xcf\xa4O\xeb\xa5\x95', 0x320, 'C\x01B,\t+o\xc4\x04\x00\x00\x95\x1d\x8528\x9a\'\x19\x0f1\xca`\x0f_\xc6[$\xac\xe7\xd5b\xf4\x9d\xd8\xc5\x00\xef\xe4\x1c\xae\x11<|J\xc8\xc0\xf4\xab\xd6\x9f\xd9\xce\xdd\x03\xdf\xe4-\x00\x89\x87\xd2O\x7fD|\xe7\x1e\x89\xd5\fh\xeb\xf9\x17\x7f\xa7n\xd5\xaa\x10\xeb\xdf\v<\x13\xe6B\xed\x04\xb2\xf0h\vh\x96\xfa\xd8M\xd5\x17SX\x98\v\xc9\xc80\xd8\x06\x00\xfa\x107mc\nnw\x1b-\xe1\xe1\x87\xb1(\vM!&\xd7s\xae\x99u\x7f\x91\x87|\xc8\x02\xe2{JL\xf4\x1a\\\b\xd2\xb0\x04(\\\x99\xbd\xa1\xb9\x82\xa4\x12S\xd5l\x8e\xd0\x159\xdfc&\x1bK\xa3\x0f\xe3@\xd1W\x18\xbc\x11\xb9 \xa9Q\x1f~}@g\xe2i\x1c&\xb5^\xa1\x1d&{\xa3\x0e\a\xef\xb1\xa8\xc2H\a\xfa8u\x13y\xbf\x0e\xd8Q\xbdb\xb8\x1d>\x83\xe4\xae\x87G^\xb2\xe2\xd8/\xb3\xbdQ\\:X\xbc\auc\xcf$gT\xdf\t\xd4#U\xa6C\x88\x0e\x1c\xf0\xd3g\x87\x90{\xc8V\x1b\xbd\xfa \xe7Q\xf0N\xe0\xca\xeb{\xbe/4q\xea:\x12\xd1\x05<\xc3Zvv$\xa2\xb9\xd3\xf0\xf94\x90\x1b\x18!6\xce\"\x99\x8egP\x86\xc6\xc2\x859O)\xbb\xa8\xeb_\xea\x9d\xa8\x95\xab)z/\x14\xed\x9b\x88\x82k9\x9cp!\xdb\x93\xebB\xd4\xef\r\x8e\xf1y\xbd\xc6\xea\xa9O;\rFW\xc0\xf5\x95\xf9\x81\xbbq\xecQ\xbc\xd6\xef\xa6\x7f\xb2\tB\xec8\xb9\xe6@\x8dt8JvW\x00\v\x1a\xe3U\x16\x18/>\x9crRi,\xe5?\xa4\xb1\xee\xd2n\xa8\xday\xd8\r\xe5\xf1\xbe\xe3T\x05\x98\x99\xfa\x8b\x89a\xcc7\r\x8f)R\xf8x\x056O\xef!\x9a\xa9Df\x96\r\n\xa9\'\xd5\xba\xdc\xd5\xf9\x90\xc2\xf3\xa6o\x9b\x95\xd6\x95\x9c\r\x16~Lj\xb9{\xdf\xe3\x10\xac\\:`\xf9\x17\xce\xc7\xee\xd1\x8bdC\xa8\b\xc3PW\x891\xfd\xe4\xd4BR6\x03\xe9;\xb1\x18]\x9f\xd9\xc5\xcc\x1cM\xdc0\xd0\xff\xf4\x00\xebP\'\x14\x0eV\"\xbfcNe\x00\x9as\xd7\x8c>\xb8\xc0\"\xd8\xdcf\x89\xbdP\xa4\xdf\xdd\xf68=}c\xa3VT\x04PJ\x99P\xedW\xb6\x9b\x12\xb9\x10Q\xf3`s\xaa|E\xfb\xe7\xe4,:%\xad[\xdaw\x1f\xbf\bo\xab\xfd/\xea\xae\xb5\xeae\"\xfe\x1e\x04\xbd\x9a\xd1\xa3\xf5\x06\x00\x00\x00\x00\x00\x00\x00\xfd\xc9\xf3\'\x84:F:=r\xda c\xf7\xd4x\xdd\xf9\x84B\xf2\xa1\xfc\xf7\xa8`2\xffL1%\xed!\xac\x0e\xbfb5\xfc\xab\xdd\x99\x1f\x91\x12\x96S\n\xe3\xc8\xd2\x90\xd3\xef\x8dE\xc8\xe1\xed2I\xf6\xb6Tn\xc2\x9fvm\xbd\x86vft\x88-\a\xfd\x8c\x02\x11\b\xe7\x10\xdc\xdfw\x81\xb9\xbcYe\xaf\x89ikC\x03:\xcc\x03TK.\x01\xa9\xff\n\xfb\ba\xcb\x04]]\x1a|\xfdV\x18;\xc9\xdcNO!\xad\xf7\xcd\xad\xddW\xack\xf96\xcbc\xdf\x9c\xccD\xec\x01z\"\xd7\xac\xc2bc\xf6\x05e@Q\xbfz\xe0\xd2\x02\x00\xea\xb4\r\x9b/~\x03\xb9\x0fK\xec\xdf\xfebw\xe7\xfd53\xd9\x17q\xa1D\x01l\xc8\xc0|an\x9d9\xfe\x97\xa6\xf8\xc4\xa3A]h\xa4\xc0n\x0fj4e\xd9\xeewM\xa6\xb1\xa8\xb1\xa9\xb9V}\xbf\xcd\xb0\xbb\x919#\xd7\xac7\x00\x00\x00\x00\x00\x00\x00\x0031z\x9a\xe7\x9a\xab\xf6\x12\xde\x98\x1d\x96t\x91\x88iF\xd1u\xc12JA\x91\x03dN\x1cH\xb2\xde\xcb'}, 0x1c3, '\xea\x17\xaag\xa0\xe9@\xbd\n\xfc\x02}\xff\x165\x99;/v\xef\'\x86\v\xaf\x16\xdb\xba\xee$z\x85K\x17T^22=\xf4\xd0\f\xeb\x8a\b\xd2\xea\xa0\r\x00\x00\x00\x00\x00\x021\x05x\xf7\xea\xfbw\xcaw\aL\x88v\xcb}\xa0\x90\xe7f\x9c\t \"\t\xbeN\x94\x12\xe8\x9f\xfcb\xba&r\x12y=\x7f\x80D\xb3*Dbu\x9f&Z\xff\xf6\x02l\xa4\xb2K?\b\x1b\x91\xb4\x98\xf0\xc3\xb7\x8b\xb2\xd3\x0e\xe4\fv\xdaE\x958\xb0\xe3p\xd6\xea\x94\xb9K\xbdL&\x10\x05\xea>\xe0a=\x83a\x12{l\x8d\x12>6q.\xe6\xb9\xa3\xa9s=\x14\xd7\xfb^[\x1d0\x03\xa9\x9bc*0s9\xbd\x05r\x0er\x81\xa1\xb4K\x91\x02\x00\x00\x00\x00\x00\x00\x00\x9b\tv\x00\x00\x00\x00\x7f\xa4L\x89\x0f\xedk7\r\xbb\xe5)\x10$(\xe24\xcb\xa7\x1f,\xcf\xeat(\x12\x12\x1d\xbe\xc4\x85\x90\xfd\x13P\xcf[&\v\xcc\xcc\xea\xd7\x8a\x9bM\xcf\x06E\x1cc\xd5\xa4\xca1^+\\h\xca\xa7\xc2\x93\x147\xc5\xc2{\xb1\xde\xe5\xeb\x13\xb7l\x9a\x04A\xf6\x16M\xef\x9a\xca\x83\xaf\xacwNE\xff\xc0\xe2v\xa3\xed\xbbH\x01\xda=E\x89*\x80\x1e<\xa7\x9f\xaf(\x1d\x0e\xd0\xa5\t*\xea\x18<\x04p\xe0\xed\xf8oW\x84%\x86F\x84\xeb@\xb4\xde\x1f>y\x9fB\xadU\x12\x99\\swN\xee\x12\xda]\xd8\xdd\xc0q\x80\x91\xf2\x9fW\xf9\xb0/ASd\t\x00\x00\x00\x00\x00\x00\x00\xeb\x87\x15))\xdc+\xf5\x15wP\x1e`,\xf5/G\xf5\x0f\x0e\xc9J{\xa0N\x8c$6Y\xf9\xb8\xc9x3\x8a\x1c?]{]\xd6\'\x83\xec\xdd\xba|\xab\xe2#\xfd,\xab{\xfa\xa6w\xc8\xe3\x05\xffU\xc0\x19\xf4aK\x1dX\xf5', 0x0, 0xee00}}, 0x7e2) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 14:13:03 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) eventfd(0x0) read$eventfd(r0, 0x0, 0x0) [ 679.125747][ T1875] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:13:03 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0x22, 0x75, 0x0, {0x17, "25f5b12db254a6d385c8be89b81278a781e7af607c15d1"}}, 0x22) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:03 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1a000000"], 0x1a) 14:13:03 executing program 4: mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000640)={0x2, 0x0, @multicast1}, &(0x7f0000000680)=0x10, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000840)='schedstat\x00') setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) readahead(r0, 0x0, 0x0) [ 679.300299][ T1875] bridge_slave_1: left allmulticast mode [ 679.306028][ T1875] bridge_slave_1: left promiscuous mode [ 679.311875][ T1875] bridge0: port 2(bridge_slave_1) entered disabled state 14:13:03 executing program 3: r0 = memfd_secret(0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 14:13:03 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000025c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002b00), r0) syz_genetlink_get_family_id$wireguard(&(0x7f0000002b40), r0) [ 679.376218][ T1875] bridge_slave_0: left allmulticast mode [ 679.382113][ T1875] bridge_slave_0: left promiscuous mode [ 679.387867][ T1875] bridge0: port 1(bridge_slave_0) entered disabled state 14:13:03 executing program 0: r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) recvmsg$inet_nvme(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14:13:03 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) rt_sigreturn() r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r3 = io_uring_setup(0x104c, &(0x7f0000001440)) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) close(r2) close(r3) rt_sigtimedwait(&(0x7f0000000140), 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x8) ioctl$TIOCMSET(r0, 0x5425, 0x0) 14:13:03 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_matches\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x5450, 0x0) 14:13:03 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0x28, 0x75, 0x0, {0x1d, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a63"}}, 0x28) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:03 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SOCK_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 14:13:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20004001) 14:13:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4010, 0x0, 0x0) [ 679.618138][ T1875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.636033][ T1875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.650164][ T1875] bond0 (unregistering): Released all slaves 14:13:03 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb82e336200000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) 14:13:03 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x89, 0x75, 0x0, {0x7e, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280f9c846b7d1f7fabf9614b34419c2394cac12c3f8cf087045607edf5b5b1d81827247e7ec48d32e8040d0ff676cc0ebf90c4a51dd4e79eeccb5"}}, 0x89) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r4, 0x0) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:03 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x35, 0x75, 0x0, {0x2a, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400"/42}}, 0x35) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 679.693491][ T3371] chnl_net:caif_netlink_parms(): no params data found 14:13:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x48000) 14:13:03 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x4c, 0x75, 0x0, {0x41, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309ec290ef7d1c0f6d03c178e7dd934cf77312873cf98"}}, 0x4c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 679.794040][ T1875] hsr_slave_0: left promiscuous mode [ 679.804763][ T1875] hsr_slave_1: left promiscuous mode [ 679.820258][ T1875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.827951][ T1875] batman_adv: batadv0: Removing interface: batadv_slave_0 14:13:03 executing program 3: arch_prctl$ARCH_REQ_XCOMP_PERM(0x1001, 0x0) 14:13:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x1}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x1, 0x10, 0xb582, 0x0, {{0x3a, 0x4, 0x3, 0x4, 0xe8, 0x65, 0x0, 0x9, 0x4, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x1b, 0xb, [@broadcast, @private=0xa010102, @rand_addr=0x64010101, @rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x35}]}, @end, @lsrr={0x83, 0x23, 0x5, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @loopback, @multicast2, @private=0xa010101, @multicast2, @multicast1]}, @timestamp_prespec={0x44, 0x24, 0x51, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffe}, {@multicast2, 0x7}, {@remote, 0x8}, {@remote, 0x1}]}, @ssrr={0x89, 0x7, 0xc, [@private=0xa010100]}, @generic={0x44, 0x10, "ac5d07719f3c1a62f29bf4532031"}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x0, [{@broadcast, 0x1}, {@broadcast}, {@empty, 0xe94}, {@dev, 0xd4d}]}, @timestamp_prespec={0x44, 0x34, 0x38, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}, {@rand_addr=0x64010101, 0x1dac}, {@loopback}, {@rand_addr=0x64010101, 0x1ff}, {@local, 0xa1}, {@loopback, 0x9}]}, @end, @end]}}}}}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x8, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip_vti0\x00', r2, 0x8, 0x20, 0x80000000, 0xff6, {{0xf, 0x4, 0x1, 0x2, 0x3c, 0x67, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x32}, {[@cipso={0x86, 0xb, 0x3, [{0x5, 0x5, "afc349"}]}, @ssrr={0x89, 0x1b, 0xb5, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @broadcast, @rand_addr=0x64010101, @remote, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000780)={'sit0\x00', r2, 0x8, 0x1, 0x5a7, 0x10000, {{0x6, 0x4, 0x3, 0x2b, 0x18, 0x64, 0x0, 0x0, 0x29, 0x0, @empty, @loopback, {[@end]}}}}}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000800)={'#! ', './file0', [{0x20, 'erspan0\x00'}, {0x20, '+(-'}, {0x20, '+*@\\^(:'}, {0x20, 'erspan0\x00'}, {0x20, 'batadv0\x00'}, {0x20, 'tunl0\x00'}, {0x20, '%'}, {0x20, '@-\'!\xa2\\}\\\x94'}], 0xa, "a0e4227ab32265e97bd4d82b22df40370439371ee00adc373c41b1832fe4b575e75b3a0b49abfa0936d85e677c35489992dfc7aed03057690c6d77efdb6cab3bc62aaef2e50220a265302a8a154305706b9809a849c7874939345f3f75db6c58d5c2b3dc0abbcec90f5601ee54ab673c4ee039537f022b8c3ea6142c794eaa8e7c33100578531fd8cf0a843366d088bfe0b6a5b231d089d5944c2bc091b7b0df60a3a9fdfdb1228296821a4b11af5bea36599e41d81e1450b1ff1d860561a6946e5b55fa6a2a4714c07a2094dce872dbbaa0ec58cd0ef2f9631c6dc4dee8"}, 0x123) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000a40)={'erspan0\x00', &(0x7f0000000940)={'tunl0\x00', 0x0, 0x10, 0x10, 0x8, 0x1, {{0x29, 0x4, 0x3, 0x5, 0xa4, 0x66, 0x0, 0x6, 0x29, 0x0, @remote, @loopback, {[@rr={0x7, 0x1f, 0x92, [@rand_addr=0x64010102, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0xf, 0xcc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x32}]}, @timestamp_addr={0x44, 0x34, 0xcb, 0x1, 0x1, [{@empty, 0x6}, {@remote, 0xe3f}, {@broadcast, 0x1}, {@empty, 0xffffffff}, {@broadcast, 0x1}, {@remote, 0x5}]}, @cipso={0x86, 0x2c, 0x2, [{0x6, 0xb, "a3527b998fe6c47535"}, {0x2, 0xd, "64507390375fe7e08d7690"}, {0x0, 0x3, "97"}, {0x1, 0xb, "b3171d7795f051c290"}]}]}}}}}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000b00)) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000b40)={0x0, 0x1, 0x6, 0x3, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c40)={'sit0\x00', &(0x7f0000000bc0)={'gre0\x00', 0x0, 0x8, 0x8, 0x0, 0x401, {{0x12, 0x4, 0x0, 0x18, 0x48, 0x67, 0x5, 0x7, 0x29, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x24, 0xf, 0x3, 0x8, [{@private=0xa010102}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x8001}, {@loopback, 0x1}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @generic={0x94, 0x6, "af2f45d0"}]}}}}}) r5 = syz_open_dev$loop(&(0x7f0000000c80), 0x2, 0x0) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000cc0)=0xffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000d80)={0x0, @local, @empty}, &(0x7f0000000dc0)=0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e00)={'veth1_to_bond\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000e40)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f00000010c0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000000e80)={0x1ec, r7, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x900bf62753331a17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20004000}, 0x20080) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000001100)={0x0, 'sit0\x00', {}, 0xffe0}) fsetxattr(r0, &(0x7f00000011c0)=@known='trusted.overlay.origin\x00', &(0x7f0000001200)='\x1f:+@-\x1d@:*:e\x00', 0xc, 0x3) [ 679.853645][ T1875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.861578][ T1875] batman_adv: batadv0: Removing interface: batadv_slave_1 14:13:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000017e00)={0x0, 0x0, &(0x7f0000017dc0)={0x0}}, 0x1) 14:13:03 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/110) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000080)=""/160) r1 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmget(0x1, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) [ 679.914291][ T1875] veth1_macvtap: left promiscuous mode [ 679.919916][ T1875] veth0_macvtap: left promiscuous mode [ 679.925557][ T1875] veth1_vlan: left promiscuous mode [ 679.930927][ T1875] veth0_vlan: left promiscuous mode 14:13:03 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000680)={0x50, 0x75, 0x0, {0x45, "25f5b12db254a6d385c8be89b812f5a77682aa0c989b1925f65d153d3277202637c096bdcdda178167e9aa79416ce4f4a952507bdb03faf1adbf90ddd9fd183ca3d5eae465"}}, 0x50) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001480)={0x1, 0x0, 0x3, "e9"}) r1 = dup(r0) write$P9_RSTAT(r1, &(0x7f0000000140)={0x4b, 0x7d, 0x1, {0x0, 0x44, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xa, '-/[,-^**\\-', 0x5, 'wfdno', 0x1, '\x00', 0x1, '!'}}, 0x4b) 14:13:03 executing program 3: r0 = openat2(0xffffffffffffff9c, &(0x7f0000003500)='./file0\x00', &(0x7f0000000000)={0x14d940}, 0x18) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4050) 14:13:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0xd86, &(0x7f00000002c0)) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000070000003800058007000100696200002c000280080003000000000008000100000000000800020000000000080003000000000008000100000000004800058008000100657468003c00028008bdbe9ce537000100000000000800020000000000080002000000000008000100000000000800040000000000080001df456394"], 0x94}}, 0x0) close(r1) 14:13:03 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000680)={0x1a, 0x75, 0x0, {0xf, "25f5b12db254a6d385c8be89b812f5"}}, 0x1a) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:03 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x60, 0x75, 0x0, {0x55, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f497d049fb75f016bcaa6043859189a0484f83b61835272c6"}}, 0x60) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340), 0xffffff46) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:03 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x9c, 0x75, 0x0, {0x91, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280f9c846b7d1f7fabf9614b34419c2394cac12c3f8cf087045607edf5b5b1d81827247e7ec48d32e8040d0ff676cc0ebf90c4a51dd4e79eeccb54de21aad09f6e209cb549c5c181e48a77be366"}}, 0x9c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:04 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb82e336200000000) close(r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) 14:13:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) 14:13:04 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x2f, 0x75, 0x0, {0x24, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000"}}, 0x2f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) r4 = socket(0x1, 0x5, 0x0) r5 = dup3(r3, r4, 0x0) accept$inet(r5, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 680.200916][ T1875] team0 (unregistering): Port device team_slave_1 removed [ 680.214834][ T1875] team0 (unregistering): Port device team_slave_0 removed 14:13:04 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x93, 0x75, 0x0, {0x88, "25f5b12da264a6d385c8be89c88483459b8a8fb7e631fcbe609d840a5a0df5af2862ce60a7377ed49dd656494ede7f514117f1fbd0eb98d63a4f3fc5dd131bbfd9069bc999fe6e6907a67d3e42af3cd5fe3776bfcdd5b7b138db58f94e633cf36a9e7e201a373817cd9aa299c0cb999713440ac75f6b91b861ba99e37b6bbeea5300d65d087162b1"}}, 0x93) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) recvmmsg$unix(r4, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:04 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x48c0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 14:13:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x60002) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001480)={0x1, 0x0, 0x3, "e9"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x33fe0}}, 0x0) r3 = io_uring_setup(0x292a, &(0x7f0000000500)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) close(r2) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000070c0), 0x0) rt_sigreturn() exit(0x0) close(r3) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, 0x0) 14:13:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(r0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x19, 0x0, &(0x7f0000000080)) 14:13:04 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x1c, 0x75, 0x0, {0x11, "25f5b12dc45605000000be89fb42c7882f"}}, 0x1c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:04 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x7f, 0x75, 0x0, {0x74, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f497d049fb75f016bcaa6043859189a0484f83b61835272c6c0b9067c033b29f5865f1edae5de79b512bcf8d2a9f127f327e11552402ae7"}}, 0x7f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:04 executing program 3: mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8901, 0x0) [ 680.380019][ T3371] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.387480][ T3371] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.405522][ T3371] bridge_slave_0: entered allmulticast mode [ 680.413841][ T3371] bridge_slave_0: entered promiscuous mode 14:13:04 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x48c00, &(0x7f0000004780)=ANY=[], 0x81, 0x1230, &(0x7f00000024c0)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, 0x0) r4 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r5 = dup(r4) write$cgroup_pid(r5, &(0x7f0000000080), 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x11, r4, 0x0) sendfile(r4, r5, &(0x7f0000000100), 0x6c03) rt_sigreturn() seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 14:13:04 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/route\x00') close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 680.440460][ T3371] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.447602][ T3371] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.474847][ T3371] bridge_slave_1: entered allmulticast mode 14:13:04 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) fcntl$setownex(r0, 0xf, &(0x7f0000001480)) 14:13:04 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x5c, 0x75, 0x0, {0x51, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7da2e53b47eb85867e370e17f497d040e7d71c16c37de553fe53e45dacb205630"}}, 0x5c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:04 executing program 4: r0 = msgget(0x2, 0x429) msgrcv(r0, &(0x7f0000000000)={0x0, ""/132}, 0x8c, 0x3, 0x1800) msgsnd(r0, &(0x7f00000000c0)={0x1, "4812025166f041f9e95800d82c2b506d2253460bbcd8eb5efe1352722b451ba07f214c89dc624e959daeb65bec0411217dff1710e8d89ef472b987a5616ffbb8a6665fc19960bc219c7336afb129cc7ab6217ce7547fb9adb1eb554050f312f60b276225be55a6546adc852458c300ff61b8b3883dfffb109d50c6de5498a3a845cb878ee15133ec75f28fe687c734c054b239cb02575fb1b9b5f6705207bddffbc3de4afe827059fb6554a723a4c472e10d8f4b5f51d1822c27d949adc7"}, 0xc6, 0x0) msgrcv(r0, &(0x7f00000001c0)={0x0, ""/178}, 0xba, 0x1, 0x0) msgrcv(r0, &(0x7f0000000280)={0x0, ""/185}, 0xc1, 0x0, 0x5800) r1 = msgget(0x3, 0xf9) msgsnd(r1, &(0x7f0000000380)={0x2, "1cf336c1211f89010632cc57c1c8e03c213775a2b08f55fd6f836d6395c3ba3a5853b94e0fa3fdd7a2bc8e6e95808ee8792c87777e65c20e6025b266b58fbe8c6ef91a71813c9734c94465f384702170f61f4501457e19fbfad8cd936ddac6e55e5092834d240f2640f7f785ae40764b248b6a0b79fc1ba2b55d9b57ec864bd1d84fb9a65b8f750b024d2fd18a5804271fa2b87c230981d2ddcc2b764de2aedc5030913f966e729c4d30a5520ba32a6cae2c0c8320c293103c93143a44a01526bcd8583b5e88dc235e8571261680e5eef2c3387f3123adbff045cca51249ce3292b3b1c99955"}, 0xee, 0x0) msgget(0x1, 0x11) msgrcv(r1, &(0x7f0000000580)={0x0, ""/90}, 0x62, 0x3, 0x0) msgrcv(r1, &(0x7f0000000600)={0x0, ""/115}, 0x7b, 0x1, 0x0) msgrcv(0x0, &(0x7f00000006c0)={0x0, ""/220}, 0xe4, 0x2, 0x1800) msgsnd(r1, &(0x7f00000007c0)={0x3, "6a23c8439eeae2475e68c35639637e022bd0078e764b610db0352c5b78825ad9e9faa422"}, 0x2c, 0x0) msgrcv(r0, &(0x7f0000000900)={0x0, ""/231}, 0xef, 0x2, 0x0) [ 680.497685][ T3371] bridge_slave_1: entered promiscuous mode 14:13:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) write$cgroup_pressure(r0, 0x0, 0x0) close(r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) io_uring_setup(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 14:13:04 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x50, 0x75, 0x0, {0x45, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7da2e53b47eb85867e370e17f497d040e7d71c16c"}}, 0x50) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 680.571318][ T3371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 14:13:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) dup2(r0, r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 14:13:04 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000000000), 0x0, 0x80) [ 680.630622][ T3371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 14:13:04 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x64, 0x75, 0x0, {0x59, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309ec290ef7d1c0f6d03c178e7dd934cf77312873cf98c3825b097b45c0122ca4c141103a77f236df342306dd258b"}}, 0x64) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:04 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) [ 680.762557][ T3371] team0: Port device team_slave_0 added 14:13:04 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5452, &(0x7f0000000000)) 14:13:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "847079cb3e0c694f213993daa284e96f"}]}, 0x28}}, 0x4000) 14:13:04 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0x18, 0x75, 0x0, {0xd, "25f5b12db254a6d385c8be89b8"}}, 0x18) r2 = creat(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = eventfd(0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43, 0x9, 0x0, {0xffe}}, 0x43) write$P9_RSTATFS(r4, &(0x7f0000000200)={0x43, 0x9, 0x0, {0x80}}, 0x43) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 680.803805][ T3371] team0: Port device team_slave_1 added [ 680.813349][ T5823] chnl_net:caif_netlink_parms(): no params data found 14:13:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) 14:13:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000180)) 14:13:04 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x3d, 0x75, 0x0, {0x32, "25f5b12db254a6538a5bdacf717db7de261beef4e1f36e935a0dabe21b0800a8a8a835382ea656e2bd35a34cf80efb0f7023"}}, 0x3d) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x2e, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0xe0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 680.908799][ T3371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.915824][ T3371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.941852][ T3371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 14:13:04 executing program 4: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x241}, 0x18) setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=@sha1={0x1, "cff1eb5de8580b1a51523e1d3c247175e5088bf6"}, 0x15, 0x2) 14:13:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x33fe0}}, 0x0) r2 = io_uring_setup(0x292a, &(0x7f0000000500)) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0, 0x34}}, 0x0) close(r1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r2) [ 681.005664][ T3371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.012728][ T3371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.038792][ T3371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 14:13:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 14:13:05 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x3e, 0x75, 0x0, {0x33, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e"}}, 0x3e) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'trans=fd,'}}]}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:05 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001440)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) 14:13:05 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) write$binfmt_misc(r0, &(0x7f0000000880)={'syz0'}, 0x4) [ 681.135149][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.142453][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.150603][ T5823] bridge_slave_0: entered allmulticast mode [ 681.157762][ T5823] bridge_slave_0: entered promiscuous mode 14:13:05 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) [ 681.194952][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.202303][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.210047][ T5823] bridge_slave_1: entered allmulticast mode [ 681.217787][ T5823] bridge_slave_1: entered promiscuous mode 14:13:05 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0x5450, 0x0) 14:13:05 executing program 4: openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x20) fcntl$F_SET_FILE_RW_HINT(r0, 0x3, 0x0) [ 681.271550][ T3371] hsr_slave_0: entered promiscuous mode [ 681.283578][ T3371] hsr_slave_1: entered promiscuous mode [ 681.294035][ T3371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 681.302101][ T3371] Cannot create hsr debugfs directory 14:13:05 executing program 4: r0 = syz_io_uring_setup(0x7b8f, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, 0x0, 0x0) 14:13:05 executing program 3: r0 = memfd_secret(0x0) r1 = epoll_create(0x3) dup2(r0, r1) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) 14:13:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x8040) [ 681.315323][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.341626][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.358985][ T1875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:13:05 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x27, 0x75, 0x0, {0x1c, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e1"}}, 0x27) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:05 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000024c0)='./file0\x00', &(0x7f0000002500), 0x0, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000002640)='./file0\x00', &(0x7f0000002680), 0x0, 0x0, 0x1) 14:13:05 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x13, 0x75, 0x0, {0x8, "25f5b12db254a6d3"}}, 0x13) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) write$P9_RVERSION(r3, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0xb, 0x0, 0x0) 14:13:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, 0x0, 0x5597da541dfc9b54, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={0x149842}, 0x18) dup2(r0, r1) syz_genetlink_get_family_id$fou(&(0x7f0000002040), r1) [ 681.435791][ T5823] team0: Port device team_slave_0 added [ 681.457985][ T1875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:13:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) write$cgroup_freezer_state(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) close(r1) socket$inet(0x2, 0xa, 0x0) 14:13:05 executing program 3: creat(&(0x7f0000000140)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0/file0\x00') [ 681.520784][ T5823] team0: Port device team_slave_1 added 14:13:05 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) read(r4, 0x0, 0x2006) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000003a80)) r5 = dup(r4) rt_sigreturn() ioctl$TCXONC(r5, 0x540a, 0x0) write$P9_RREAD(r1, &(0x7f0000000980)={0x75, 0x75, 0x0, {0x6a, "1039de23002db6eef7d1b1d9a91790a9de1362da384df24f3d76719dbeaac1d533ad3b59b0529d9758acec47b7b021b23137d604d8a5e7cd4dc7260601685a408cc14a4c3f8f4b7bb9e8a4beacb6f05c47859f9cdb02de311c44de083fb6f187587fd0f4d02acb0cac43"}}, 0x75) 14:13:05 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) [ 681.579277][ T1875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.605991][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.613109][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.639446][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.657945][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 14:13:05 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0x14, 0x75, 0x0, {0x9, "25f5b12db254a6d385"}}, 0x14) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) [ 681.665017][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.691127][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 14:13:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000003580)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 14:13:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, 0x0) close(r1) socket$nl_audit(0x10, 0x3, 0x9) 14:13:05 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) close(r0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000240)) [ 681.748021][ T1875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:13:05 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x94, 0x75, 0x0, {0x89, "25f5b12da264a6d385c8be89c88483459b8a8fb7e631fcbe609d840a5a0df5af2862ce60a7377ed49dd656494ede7f514117f1fbd0eb98d63a4f3fc5dd131bbfd9069bc999fe6e6907a67d3e42af3cd5fe3776bfcdd5b7b138db58f94e633cf36a9e7e201a373817cd9aa299c0cb999713440ac75f6b91b861ba99e37b6bbeea5300d65d087162b14f"}}, 0x94) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) recvmmsg$unix(r4, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:05 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001580)) 14:13:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setreuid(0xffffffffffffffff, 0xee00) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 681.843584][ T5823] hsr_slave_0: entered promiscuous mode [ 681.851515][ T5823] hsr_slave_1: entered promiscuous mode [ 681.865063][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 681.878397][ T5823] Cannot create hsr debugfs directory 14:13:05 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x9c, 0x75, 0x0, {0x91, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63986e851b0cb4be35de2edfe3b50591fcb4fab33eb62a9cd3e323f0"}}, 0x9c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:05 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) rt_sigreturn() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 14:13:05 executing program 0: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x80045301, 0x0) tkill(r0, 0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 14:13:05 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f00000007c0)={0x939, 0x7d, 0x0, {{0x0, 0x850, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2c9, '\x00\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x02\x01X!\x04\xe1[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xff\x03\x00\x00S*\xfc\xb1\xc9\xa3\xf6\xb4\x1b\xaf\x9e\xdbM\x17\xb9\xb2J\xec\xb1\x99\x95m\r\xe8\xb5\xf2{\'\x11+gUf\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xff\xb5YU=\x1eE\xcdw\x1f\xc8j<^\x94\x82\x01S\a\x19\xbb\"\xae\x98\x1cp\x03\xa5\xbcp\v\xaaBs\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xd6\xf1\xb3\xe3\xffc\xd5\xb4\xe6K\xcc~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee;/\xf6\x9f\xcb\x8ac#\xa2\xf7\xe6\x19\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80-\xe3:\xe0$p\xb0\xf5\xaa\x98\xbf\x03\n\x1a\x82J\xf6Z\xa6\xc3\xc6\x144\f\xc2\xfdR\x87cp\xe0\x15\xfc-\xef\x82\xa0\xb7\x1d\td\x1d\xe9\x9c\xe1\xadU\x1c\xbc\xe1L\xee\x8b,\xfcm\x8c\x81\xa7\x17W\x04\xd2\x89W\'*\x10(\x1bS\x91\x80\x1e+D\xb8\xda\xed\tD\xa5|w\xed\xe0\xd7a\x9dz(U3\x9b\xcf\xde\x03\xe6 b\xd8\xab-\xfc\x00\xfb\x04b\xb8\xe3\xcd\xb6\xba\xe7\xac\xd5\x91\xd5\x1b\xd8\xc5\x81L\xe0\x0f]!0\xad\x83#L~\x89\x9eo\xb9H`\xf73l\xd3)\xd7\xde\xb6l\x93.\x8dW%\x7f|{[\xcd\x88\xc8d\xd1\x94\xb7\xc9n\x87\f\x84I\a\xa3\x90\xc4\xb0\xd7;\xd7+B\xce\x82\x81\x81\x81\xaf\x80\xb0\xbb~1\xc2k\b\xb7Z`\b~\x8f\xe8\xb0?\xa9%-\xb3\x91Z~&\xa7\r6\xaat\xef\xf87N6\xec\xcb\xbd\xdc\xe4\xe9ep\x95Y\xfc\x15\xb2\xfcJ\xa4\xc1\xd4\xd1\x1ci(\x9a\xb7\xdc\bg\x1b\"i&\xbbc.S\xd3w\x8a\xbbE\x93yR!X\xfb8\xfa\xfd\xa5\x87\x00\xf2)L\xd9\x01e\xd0\x06\x8c\xb1\x87\xdaQ\xec\x0f=\x7f\x9a\xb4\x0e\x8a\x8f\x7f\xc0\xa0\x16\xec\xb8q\x97,w\xc8\"\x9c\xb5^!\x04\xf7n7\x81\xe1\xba0\xa4\xe5ad\xe2N\xfc\xc6\x7f_\x88?\xb8\xef4\xb3-\xe1Ps\xe0U\xacT\x89\xed\xca\xcf\x16\xd9\xb2\x93;\x7f\b\xfd\xb9\xe6\x95\x8d4\x16ix\x84\xdcC\x87p\x17\x0f\x98O1\xaa\xf0K\x9cb\x8f\xfb\x1aJ\xeeq\xac\x99\xb2J\xeb\xaf\xb2\xad\x9e\xfd\xf9\x00b\xe3\xc8\x01\xc9Ta\xcb\xd70\xa0\x16\xbc\xdeE\x99Q\v\xc8b\x7f\xbaE&\xee\x16\xc8\xba\v`\x11\xcc`\x7fE\xca\x83\x96$\xbf\f\x13\x96\x9e\f/~\xe9%_\\\x00\x8e?KV\xb1\xe9\xc5\xcd\x0eW\x9d\xc1\xdcZm\x1b\xbb\x1a\x1e3\xe9\xa0\xa9\x89\xb1\xcaV\xfc\x81\x1a,\xf2R\xe3\xb0:\x97\x84\xe5\xbc\xea\x89\xe4\xbe\xfd\x9ei\v,d', 0x193, '\xf1\xa3\x9c\xdf\xea\xe3ez\x1b\xbe\x13\xdb-\xa0`1+L\xfc\x16#T0\\\xe43\x1dB{\xcc\xc8x\a\x00\x00\x00\xa7&\xa2\x15*a\x7f\\\xa7\x87&\xbe\xdau\x911\x83\x94\v\xdd\boQ\x01\xb9\xf2\x05\x95\xb6\xca!Cv\xc5\xc7\x02;\x15\xa4\xdak\x9c\xdaE}\xaf\x86!`\x91\x96C\x95\xfe\x10_\xd6%Y\xc9\xb0\xb8+\xcbZ\x93)}\x02\xb4\x9d\x8c\xa7\x12\xc4\x9b\x85-\xa1\xed3x\n\fU[c\x00\x9frpX\x12\x86=\xcdW\x81\x02\x1b\xf5\xdcQ\xb9\x0f\x95W\xd5U\xee\x93\x14\x8bO}l\x159\x17\xacF\x05\x10\x88\x8e\xbc\xe6\x06?\x17\xa8\xaa\xb9O\xd0U(\xf5\xd7\xe7\x94\xba9\x92\xbf\x021\a\xfft\xfc P-\xd7\x01&hiQ\xa1\xc1\n\x8d\x87\x1c\xaf\x9c[\rY`', 0x2d2, 't\xfd\xd6\x00\x00\x00\x00\x00\x00\xba\xb0\xe1\xc3sV\xd2\x91\xf5h\x02\x00\x00\x00)\xeb\x9e\xb1\x17\\Ax\x87\x13\x13\x95\xc7\xeb\x84\xe7\xc3I\x19jx:_T&q\xcc+\x8dT\xc4\xb0\x89}\xe8\x02\xd1\x9e]\xef,\xa5\x9a\x1b\x93\xe4\xc9\xd3\x13\xc10\t\x87\xbd\x10$\xfbd\xc5Z\xdeY\x88\xc6\x83\x15\x84kI\xae\xads\xae\x13\x12q\x86\xa8_v\xef%\xf5j5\x88\xc7~\xb5A\x93\"\xeb\x97\xe0E\xafmz\b\xb52\xbf7\xbd\xe90H\xad\xf6\xb7\x94\x00u>\xe3(\'C\xad\x8e#\x83[K\xd4zk\xa0\xa06v\xfe\xce\x80\xe5\xf51\x8f\xf1\xdd\xeat\xca\xa0\xc8\xfe\xef\xf9ZU\xf9\x02M\xab\xd3\xc6q\x91\xa0e\xad$\xd1\x15\xd4I\x94\xf3\x9b\xa3\xb2_\x80\x85\xd2\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7QeK\xa4k\xce\x82^LT\x90{kA|k\xdc\x14\x7f\x03s\xb5\xaa\xee\x13D\x9c\xc8\x9da\x026\xe8\xe9\xf8\x05\xbca\x9f[Z\xe5\xf6L\xd6x\'\x89\xe8\xf9\xfc!\xbei\xdc}H\xf9\\\xcfE\xc6\xf4`\xb6:\xf9H\xc6\xc2\xac\xb4\x9fQH\xdfI\xee\xa1\x95\xaf\xe6\r\xee\xf3\xd2\xdd\xa7\xaa\xc3\x80{\xc7\xa5\xd46\xb3P)\xbc\x80\x13\xfb?\xadI\xc6\xd6\xa8\xd8`\xce\xe9\xf4\xf7\xe6\xd8\xda\x8eK\xb5\xd6\xbd\x7f\xe6\x04\x00\xfd\n\xca\xa3T\xfb \xae\xa6\xaf\xd9\xcb\xc6\xf7\xf2\xa5\x8d\xb7\xcd\xf9\x17B\xd4[\x87\n\x04pF\xb7\b\x12\x94\xd9\x04\xd8-\xf7\xa7\xcc\b\xa0\xfbD\x9c\x93z\xdf.\xbb\xaa/6p\xe6K1y\xdeH\xa6Dk\xe4{\xc3\xc7\xf5\xee=\x88\xfa\xb1\xd2\xc08\xea\xe6\xe4\xad\x04R\x06\xa1#\xd6`d/E\xaf\xbf\xf7\x84\xe56\xf6\n\xa9x\xbb\xcb\xd2\xad)\xcd}e{\x81\xe9\xa2?)\xe7\xcb\xad\xb4\x1e\xec0\xd8V\xf2q],~\xcc7c\xf9O\xc0\x99\xd83\xadpn\b\xe2;\r\x03#pP\\\x0e\xf1\x0f\x8e\xe8\xf5\x91,Xc\xcf\x8c\f\x80m\xe1\xb0\x95\x896\xec\x13._c\x13e\x90\xc7\xbfJ\xb6.\xd3r\xac\x00\x00U\xbb\xa0\xb4?8\xe9\xc2\x12Z\xb9cP\xb2\xa9\xd1\xb6\xe8\xd6\xf5~\xa6\t\xa7/\x18\x05\x15Y\xac\xba\"\xfa(\xb7\x89\xf5\xcd\xec\xd0\xaf\x83\x9f\x86\xb6F\xe31/\xb9*N*K\xc5\xc7\xf8\xdf\xb2\xcd\x7f\x90\xa1\xf7\xb2\xaa\xbe-\x86\xf1~\b\x94\x11c1\x1b\xec\xdf3l\xb4J\xf4\v\xaf\x92q\xb9\x1e\xc6\xaa_=\xd2\xb5\xc5\x9d\xe9\xdb\'\x81\x13\xde\x01\x92w\xf9\x1e\xd9\xc1\xd8\xf1\xba\xe8\xb6\xc1dH\x9a\x0e;P\x10\x81|e\xefRX3\v,\x94\x99\xca\xe1\x83\xc3\x83\x01?\x1b-\xd4w\x88\x9a^$(\xfd\a\xad\x14\xab\xa7s\xf7f]\x16\x13\xf5~K\xa9j-\x13\xd7\xa8L\xd8\xed\xed\xf2\xae\xd8\xbd\xa8,pz\xf9\xae\xc0\v\xc9\xafQ\x04\x1fF'}, 0xd4, '\xea\x17\xaag\xa0\xe9@\xfd\n\xfc\x016\x10\xbb=#zg\xd5Yy\x86\v\xafk\xd7\xf1\xed1\xc0#~Q\xfd\xeb\x8a\b\xd9\x83\xe9Z\x00\x00\x00\x00\x00\x001\x05x\xf7\xea\xfbw\xcaw\aL\x89v\xcb}\xa0\x90\xe7f\x9c\x04\x00\x00\x00\xbeN\x94\x12\xe8\x9f\xf8b\xba&r\x12y=\x7f\x80D\xb3*Dbz\x80\x15%6\x1f\x0f\xe4\xa4\xb2K?\b\x1b\x91\xb4\xc9\xd7\x8f\xe5^\x00\xd6\xdd\f\x95\xa7D\x98\xf0\xc3\x1a\xcdmK\xcc\xacV\x93\xef(\xe15\xccYK9\x8b\xd4n\xdai\x84\x9a\x9b\x19\xfc\xa1qE\xfe\'\x89\x06\x91\r\x1b\xa8\xe3\xb3\xde\x9eF\xc6\x16\xf0x\x98\xb5y\xb0\xb8\xe7P\x7fs\x86\xe6\'\x8c\xa9\';\xa2\x03\xda\x94\x05\x04\x01t\xddJ\x13$\x18\x00'/212}}, 0x939) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = eventfd(0x0) write$binfmt_elf64(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c460000008c"], 0x78) write$snapshot(r3, &(0x7f0000000700)="3b453e1a5582ccc8", 0x8) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:05 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) [ 681.992174][ T1875] bridge_slave_1: left allmulticast mode [ 681.997908][ T1875] bridge_slave_1: left promiscuous mode [ 682.003824][ T1875] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.015700][ T1875] bridge_slave_0: left allmulticast mode [ 682.021528][ T1875] bridge_slave_0: left promiscuous mode [ 682.027324][ T1875] bridge0: port 1(bridge_slave_0) entered disabled state 14:13:05 executing program 0: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb82e336200000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 14:13:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x14}, 0x14}}, 0x0) 14:13:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 14:13:06 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0xc4, 0x75, 0x0, {0xb9, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309ec290ef7d1c0f6d03c178e7dd934cf77312873cf98c3825b097b45c0122ca4c141103a77f236df342306dd258be938f39409eaf669b34f95ef646e9ed3a81de101b7c14468cf871c019c864f205a3bf5ed7091d7d162944bb4c948ce4007e0e7745a8efb9721129595d7f8289abc322a77d99a639d2a5c824254a91c1fc2befe190ae956e442902a3e8b9fe8d1"}}, 0xc4) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:06 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) truncate(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 14:13:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) 14:13:06 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000003f40)={0x0, @rand_addr, @loopback}, 0xc) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 682.213014][ T1875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.239929][ T1875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface 14:13:06 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x85, 0x75, 0x0, {0x7a, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63986e851b"}}, 0x85) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x4008000) 14:13:06 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$nl_audit(0x10, 0x3, 0x9) write$P9_RLOCK(r1, &(0x7f0000000040)={0x8}, 0x8) [ 682.268361][ T1875] bond0 (unregistering): Released all slaves 14:13:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$evdev(r0, 0x0, 0x0) 14:13:06 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:06 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x99, 0x75, 0x0, {0x8e, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d040000000000000000000000000070d4502d3dd15ffbd4d621068bfca19e922fb757988a7eb397c95b3bff648818ff8dc06d780fe410bcde08774e562519f9aafc66889eee22ab92360a5d14933a73756c12452bdb3e7738afaa42e15dd527c4ac380e21c0ca8dfa77493118246139"}}, 0x99) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RLERROR(r1, 0x0, 0x15) [ 682.397714][ T1875] hsr_slave_0: left promiscuous mode [ 682.404202][ T1875] hsr_slave_1: left promiscuous mode [ 682.411403][ T1875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.419092][ T1875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.435758][ T1875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 14:13:06 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) creat(&(0x7f0000002740)='./file1\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 14:13:06 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xb1, 0x75, 0x0, {0xa6, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7da2e53b47eb85867e370e17f497d040e7d71c16c37de553fe53e45dacb206e36f6247146998b89988036d436674b000a4f1dddaff5537b3eaa914c319c56b62bad809d38d0568147b1e734fc78648d2f18955eadcdc45de953d657434ab3b03ca055d695357daa7994265c6f85011281dbe5a6acf9"}}, 0xb1) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x33fe0}}, 0x0) write$selinux_attr(r3, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 682.443395][ T1875] batman_adv: batadv0: Removing interface: batadv_slave_1 14:13:06 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xb3, 0x75, 0x0, {0xa8, "25f5b12da264a6d385c8be89c88483459b8a8fb7e631fcbe609d840a5a0df5af2862ce60a7377ed49dd656494ede7f514117f1fbd0eb98d63a4f3fc5dd131bbfd9069bc999fe6e6907a67d3e42af3cd5fe3776bfcdd5b7b138db58f94e633cf36a9e7e201a373817cd9aa299c0cb999713440ac75f6b91b861ba99e37b6bbeea5300d65d087162b14fc011b1f0e11ccbb1fbba5ae0e224d32a36c6f590524cf6ce1f8d3227a527ed"}}, 0xb3) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) recvmmsg$unix(r4, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 682.473433][ T1875] veth1_macvtap: left promiscuous mode [ 682.479065][ T1875] veth0_macvtap: left promiscuous mode [ 682.484645][ T1875] veth1_vlan: left promiscuous mode [ 682.489915][ T1875] veth0_vlan: left promiscuous mode 14:13:06 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xda, 0x75, 0x0, {0xcf, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000010e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb919b9841eea7de595f45275543ffcc1b4b48320e9e89de166dacee2ef3f3132e2f808eb1468156d2d4c728ca98cb361d417b41bbec766f1be5b9e893f49198af1b1cdc62f0290a4d5cfa6d5b8842613ffb2750c7f8056cb9b594a3a0984894505f93686c6f8893300bccd8d28b213257a328799916ab11cf6df73140f82b79d946bee61a6b5f6afeeb293446cd1c102374108c2947cbcd"}}, 0xda) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7}, 0x7) 14:13:06 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x2d, 0x75, 0x0, {0x22, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d040000"}}, 0x2d) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001740)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) recvmmsg$unix(r2, &(0x7f0000002200), 0x0, 0x0, 0x0) 14:13:06 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000001980), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) 14:13:06 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x3c, 0x75, 0x0, {0x31, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7"}}, 0x3c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r5 = dup(r4) write$cgroup_pid(r5, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e80)={0x14}, 0x14}}, 0x0) 14:13:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000280)=0x80) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 14:13:06 executing program 4: r0 = fsopen(&(0x7f0000000480)='ramfs\x00', 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000780)='+$/\x00', &(0x7f00000007c0)='./file0\x00', r1) [ 682.699540][ T1875] team0 (unregistering): Port device team_slave_1 removed [ 682.717360][ T1875] team0 (unregistering): Port device team_slave_0 removed 14:13:06 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x4}, 'port0\x00'}) 14:13:06 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x49, 0x75, 0x0, {0x3e, "25f5b12da264a6d385c8be89c88483459b8a8fb7e631fcbe609d840a5a0df5af2862ce60a7377ed49dd656494ede7f514117f1fbd0eb98d63a4f3fc5dd13"}}, 0x49) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) recvmmsg$unix(r4, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) 14:13:06 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000500)={0xbd, 0x75, 0x0, {0xb2, "25f5b12db254a6d3857ac4b4f91265a781e7af607c00000005006e0a630e82f982e03a062a296352467f3395ad75b1ad1257d1e84657ddeba5efc62c9a9826e17d295c844d7211124be3ee8e52965a50f21d0329bee47c02faf01c567d5c393d825a4b1d012a0f446e1b0d5cfb10ab41cf5e7bc174dd9e67762ffd7cca71a8352265d9bfa9481b9522db9794fb4dac64cccc48c178459cb95900fae18af6d6769dcf8427937800000000000000000000dfc6"}}, 0xbd) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:06 executing program 3: r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_pidfd_open(r0, 0x0) r3 = pidfd_getfd(r2, r1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x0) [ 682.879172][ T3371] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 682.896951][ T3371] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 682.915923][ T3371] netdevsim netdevsim2 netdevsim2: renamed from eth2 14:13:06 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup2(r0, r1) signalfd4(r1, &(0x7f0000000200), 0x8, 0x0) [ 682.926710][ T3371] netdevsim netdevsim2 netdevsim3: renamed from eth3 14:13:06 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x23, 0x75, 0x0, {0x18, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164"}}, 0x23) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x33fe0}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x5451, 0x0) 14:13:06 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r0, r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 14:13:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) close(r1) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 14:13:06 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x0, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000003d00)={0x0, 0x0, &(0x7f0000003cc0)={&(0x7f0000003c00)={0x14}, 0x14}}, 0x0) 14:13:06 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x49, 0x75, 0x0, {0x3e, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7"}}, 0x49) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 683.057346][ T3371] 8021q: adding VLAN 0 to HW filter on device bond0 14:13:06 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) rt_sigreturn() sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 683.121104][ T3371] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.140168][T10735] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.147277][T10735] bridge0: port 1(bridge_slave_0) entered forwarding state 14:13:07 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000680)={0x11c, 0x75, 0x0, {0x111, "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"}}, 0x11c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:07 executing program 4: r0 = creat(&(0x7f0000002b40)='./file0\x00', 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002c40), 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5}) [ 683.189298][T10735] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.196465][T10735] bridge0: port 2(bridge_slave_1) entered forwarding state 14:13:07 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8901, &(0x7f0000000080)) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) 14:13:07 executing program 4: fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000a00), 0x0, 0x0, 0x0) 14:13:07 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f00000000c0)) [ 683.275601][ T3371] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 683.288182][ T3371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 14:13:07 executing program 3: r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_pidfd_open(r0, 0x0) r3 = pidfd_getfd(r2, r1, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'rlimit'}]}, 0x8) [ 683.352838][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 683.370637][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 14:13:07 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$VT_SETMODE(r0, 0x5602, 0x0) 14:13:07 executing program 0: r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 14:13:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000540)='./file0\x00', 0x21000f, &(0x7f0000000240), 0x1, 0x50b, &(0x7f0000004fc0)="$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") chroot(&(0x7f0000000440)='.\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) [ 683.399716][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 683.426879][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 14:13:07 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x2f, 0x75, 0x0, {0x24, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000"}}, 0x2f) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:07 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) close(r0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000009f00)={{0x0, @loopback, 0x4e24, 0x0, 'wrr\x00', 0x0, 0x0, 0x7b}, {@remote, 0x4e20}}, 0x44) creat(&(0x7f0000009f80)='./file0\x00', 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f000000a140), 0x0, 0x0, 0x0) 14:13:07 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x5b, 0x75, 0x0, {0x50, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d040000000000000000000000000070d4502d3dd15ffbd4d621068bfca19e922fb757988a7eb397c95b3bff648818ff8dc0"}}, 0x5b) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RLERROR(r1, 0x0, 0x15) 14:13:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) close(r3) timer_settime(r4, 0x0, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 683.534741][ T3371] 8021q: adding VLAN 0 to HW filter on device batadv0 14:13:07 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x53, 0x75, 0x0, {0x48, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309ec290ef7d1c0f6d03c178e7dd934cf77312873cf98c3825b097b45c0"}}, 0x53) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 683.629911][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 14:13:07 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r0, r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 14:13:07 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xb8, 0x75, 0x0, {0xad, "25f5b12db254a6d385c8be89b8127aa781e7d164c1d1e20000e070e17f497d04000000000000000000000000147963430d306204004062f0dfc17322b1871ddb916378df6fa7de595f61c69280f9c846b7d122ad14d2dd9d9a0a48bc2b06009d963458fd5e264d8896896284f57857cd911cb849d166573664e4d8696a10f96320d4a4a8a445340cc2f7676ca8dab58482c92df3a5a9d1eefc1a06498915133b27a9eb40951e7a442d434d206f"}}, 0xb8) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:07 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x30, 0x75, 0x0, {0x25, "25f5b12db254a6227ff0e55d8c2ea55180e463e354b0c498fb7e0e8fc1ba3afd9e4d7ee912"}}, 0x30) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x2e, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) write$P9_RWRITE(r3, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 683.684759][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.718809][T10746] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.725974][T10746] bridge0: port 1(bridge_slave_0) entered forwarding state 14:13:07 executing program 0: sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0xbc1c59c5a3c652d4) [ 683.781988][T10744] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.789135][T10744] bridge0: port 2(bridge_slave_1) entered forwarding state 14:13:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 14:13:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = epoll_create(0x1084) dup3(r0, r1, 0x0) write(r1, 0x0, 0x0) 14:13:07 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RVERSION(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000800)=ANY=[@ANYBLOB='V'], 0x456) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 683.863800][ T5823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 683.874360][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 14:13:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r2 = io_uring_setup(0x6ec, &(0x7f00000003c0)) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002d40)={0x0}}, 0x0) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_all\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}}, 0x0) close(r1) close(r2) pipe(&(0x7f0000000000)) 14:13:07 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_out(r0, 0x2, &(0x7f00000000c0)) 14:13:07 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) dup3(r0, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000340)) [ 683.956612][ T3371] veth0_vlan: entered promiscuous mode [ 683.984655][ T3371] veth1_vlan: entered promiscuous mode 14:13:07 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r1, r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x5450, 0x0) [ 684.024120][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 14:13:07 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000680)={0x6c, 0x75, 0x0, {0x61, "25f5b12db254a6d385c8be89b812f5a77682aa0c989b1925f65d153d3277202637c096bdcdda178167e9aa79416ce4f4a952507bdb03faf1adbf90ddd9fd183ca3d5eae4656238177bb5b88d76d85ceb4836f8f91b2d4f8e4c9c88bfbbe9938cd6"}}, 0x6c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 684.076428][ T3371] veth0_macvtap: entered promiscuous mode 14:13:08 executing program 3: r0 = open(&(0x7f0000001e80)='./file0\x00', 0x105043, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:13:08 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x0) [ 684.133630][ T3371] veth1_macvtap: entered promiscuous mode [ 684.177290][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.187913][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.198001][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.208664][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:08 executing program 4: r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 14:13:08 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x109040, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00') [ 684.218662][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.229208][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.239392][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.249950][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.259814][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.270336][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.280463][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.290940][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.300856][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.314583][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x841, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) 14:13:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) [ 684.324485][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.334955][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.344895][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.355504][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.365606][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:13:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000009900)={0x0, 0x0, &(0x7f00000098c0)={&(0x7f0000009880)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0xd4) [ 684.376336][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.386290][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.396991][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.406878][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.417347][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:08 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/yenta_socket', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x5450, 0x0) 14:13:08 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup2(r1, r0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) [ 684.427244][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.437851][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.447856][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.458339][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x40c7, &(0x7f0000001440)) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={0x0}}, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) close(r1) [ 684.468215][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.480151][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.490331][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.500814][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.510926][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:13:08 executing program 0: r0 = geteuid() syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x208000, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES8, @ANYRES64=0x0, @ANYRES16, @ANYRESOCT], 0x1, 0x28b, &(0x7f0000004040)="$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") openat2(0xffffffffffffff9c, &(0x7f0000003500)='./file0\x00', &(0x7f0000003540)={0x149842}, 0x18) 14:13:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 684.521456][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.531366][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.541867][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.551798][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.562286][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:08 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x19, 0x0, &(0x7f0000000040)) bind$unix(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x58) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x5451, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) mq_open(&(0x7f0000000400)='+_@(\x00\x01\xc1\xb1\x83gs\x9f^@\r\xb2\xe0W\x1aw\x98\xd5Jt^\x17\x1aR~\nlg\x82t\xaf\xc1I\x196/\xcc8z\x9d\x9d\xb3\xc2\x80\xd0\xf4\xe6Y\a[\x12\x94_\xb5\x02\xbd\xeb+\rD\xf7\xee\xb5\xc0x\x1e\x01\x8c\xc0\xf2\x82g#7\n\xaa\xb4\xfc\xeeT@\xbdO\xc5\x00z\xe4\x8d\xd3k\x80-\x13hU\xd1\\\xed\xea\xe5\x92\t\x17\xab\xa5\xb0\xb4\xbcth\xbd[\xe5\xa3y_\xc4\x03\xe1~\x83\a\xf3J\xeb\xb6PT\xc3f\xb8D\xff\xd9S\xc8\xf2\xc8U\xef\xcb\xceY{\xee\xa0\x9f\x1b\x80\xbe\xde\xa0\x84^Y?\xfc\x88\xa4%L\x182Wh\xb4\xfd\xa2\xac\xa4o7G\xe7\xc6\x95#/0\x91\xc9\x9a\vb]\xc4\xcdQ\xd31#4\xeb\xce%\a\xb5\x16~\x99\x8d\x1a]\x1a\x17\xc6\xe9\xf9\a\xcbv\xab\xcb6&\xcb\xaa\xcd\xb3\xd7Q', 0xc0, 0xba, &(0x7f00000000c0)={0x0, 0x5, 0x4}) [ 684.572225][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.582699][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.594209][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.604899][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.614996][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.625508][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.635398][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.645928][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.655795][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.666396][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:08 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) readahead(r0, 0x0, 0x0) 14:13:08 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x74, 0x75, 0x0, {0x69, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7da2e53b47eb85867e370e17f497d040e7d71c16c37de553fe53e45dacb20563021138d522befde963256be8e59da8217957a7f9ec71fc9fa"}}, 0x74) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:08 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) [ 684.676460][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.687011][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.696951][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.707625][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.717521][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.728334][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.738214][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.748833][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.758713][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.769204][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:08 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) 14:13:08 executing program 0: setreuid(0x0, 0xee00) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) [ 684.779175][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.789685][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.799565][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.810068][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000027c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xc, 0x13, @l2={'eth', 0x3a, '\x00'}}}}, 0x28}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) [ 684.819950][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.831145][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.841171][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.851688][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.861795][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:13:08 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000000)='/dev/snapshot\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20d5cc9, &(0x7f0000000040)) [ 684.872322][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.882191][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.892727][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.902677][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.913309][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:08 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x48, 0x75, 0x0, {0x3d, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa"}}, 0x48) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:08 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x3c, 0x75, 0x0, {0x31, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0df"}}, 0x3c) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 684.923405][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.933892][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.943937][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.954434][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.964670][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.975257][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.985241][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.995815][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.005698][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.016183][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 14:13:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000280), 0xffffff46) r1 = timerfd_create(0x0, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ec0)=[{0x0, 0x10}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) rt_sigreturn() write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000100)={'wlan1'}, 0x8) write$cgroup_subtree(r2, &(0x7f0000000300)={[{0x0, 'cpuacct'}]}, 0x9) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="a25009b041bcdf0fd8fdde09a152294479ca66737f22bba8e3d1", 0x1a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x33fe0}}, 0x0) [ 685.026099][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.036601][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.046679][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.057166][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.067078][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:13:08 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x5450, 0x0) [ 685.077862][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.087757][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.098255][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.108336][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.118822][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:08 executing program 0: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, 0x0, 0x0) 14:13:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TIOCMGET(r1, 0x5415, 0x0) [ 685.128677][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.139148][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.149196][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.159852][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.169769][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:13:09 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x21, 0x75, 0x0, {0x16, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2"}}, 0x21) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000580), 0xffffff46) r5 = dup3(r4, r3, 0x0) rt_sigreturn() write$P9_RFSYNC(r5, &(0x7f0000000300)={0x7}, 0x7) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 685.180307][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.190406][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.200889][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.210751][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.221340][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:09 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigreturn() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x33fe0}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0xa42) write$evdev(r1, &(0x7f0000000000), 0xfffffffe) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000080)=""/29) write$P9_RUNLINKAT(r0, 0x0, 0x4e) [ 685.232240][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.243257][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.253187][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.263675][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.287370][ T3371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.308515][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.319194][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:09 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0x5450, 0x0) [ 685.329089][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.339586][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.349546][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.360278][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.370152][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:13:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$SIOCGSTAMPNS(r0, 0x5450, 0x0) [ 685.380638][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.390613][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.401132][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.410996][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.421590][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x104c, &(0x7f0000001440)) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)="a69e7ae919e73f5db65aedd166fe499aa55c726d508223cd799e0cb433fbb61c3b1f2fb09ca26944030b9c1cfac9e848e365fcaa0479e3c5a6eefe853b47a8067d73a32c3553c83a315176b1ab0184db21972f02732b6c362086d82e5144dcc5ffb7bf6ab81106e0203286772b0aace013e2cfaaa9eb31cfff0144d5db23c13e6c50ee3282985de5", 0x88}, 0x68) 14:13:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, 0x0, 0x0) [ 685.431451][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.441993][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.452213][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.462681][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.472556][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.483328][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.493263][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.503775][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.513676][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.524156][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:09 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0xd, 0x0, &(0x7f0000000080)) 14:13:09 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x11, 0x75, 0x0, {0x6, "25f5b12db254"}}, 0x11) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:09 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r1, r0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)) [ 685.534020][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.544495][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.554400][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.565299][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.575265][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.585929][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.595812][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.606412][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.616284][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.626896][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:09 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RLERROR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\fd'], 0xc) write$P9_RSTATu(r1, &(0x7f0000001c00)=ANY=[], 0x4d4) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) 14:13:09 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x6e, 0x75, 0x0, {0x63, "54a6d385fbc6b82e1657176e17f7e200be89fe949fdcc8ae6e389a93f1e2d9078a32107df90748ba4b0af5aaa6b3e5da7379ebbf73bcb75bac9148e52d20f786c49019725689cf515372fe843afd070000000000000002b5777fd8ebc885851028bfe2"}}, 0x6e) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = eventfd(0x0) read$eventfd(r3, &(0x7f00000000c0), 0x8) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 685.636774][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.647584][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.657488][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.668295][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.678294][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.688769][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.698668][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.709212][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.719093][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.729589][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000a40), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001b00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$int_in(r2, 0x5421, &(0x7f0000000700)) 14:13:09 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x12, 0x75, 0x0, {0x7, "25f5b12db254a6"}}, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:09 executing program 3: pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000001900)={0x87f, 0x7d, 0x0, {{0x0, 0x581, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x165, '\x16\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\x02\x01X!\x8f\xf6[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0{\xd2;S*\xfc\xb1\xc9Q\f\xca\xd8\xda\x19\xf5\xcf\x13\x91\xd1\b\x90>\xa3\xf6\xb4\x1b@\x8e\x06\x9d.\xe0\x95)\x04\x00\x00\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xfe\x9e\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xd6\xf1\xb3\xe3\xffc\xd5\x1a\x88K\xcc~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee\xe6\x18\xfd|\xe1\xd7\xdd\xa1=\xa8D=\x13}\x9au_\x1c\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80\xc9\xcc\x8c\r\x98~\x16\xe1B\xf6\'\x94E\xe6\xbeE\xf1\x8ae4\xf3\xb2*\x8c\xb8\xa1\x16\xcc\xc3\xf4\x19I\x93\xcf\xa6\x91\xe2\xeeG9+F\xa7\xab)~\xbd\xc6H\x13\xdf\xe7\xf7\xfb\xed{\xa2R*\x02\xbc\xcc\xf8\x9cm\xab\rMz\x1d\xa4\xbfI\fh\xa8\x15\xe5~\xf5\xd9\xb4\xc0g&,\x11\xf6\xc6\x1d\xc5\xcc\xbe\x8e\tS\xb2`\x16\xca:/\xf7\xb6\xc8v\xd3\x96\x8c\xb6\n\xa9\x16\x932\xfd\xce\xa0\x90\x99n\xb9q\x94\x96\xe3\xe1\x02j\x87\xfa\xc6kR\xber\xf3K\xe1\xdb\xbf\xbe(\xe3\xe1\xcfR\xbf\xce\f\x90\x12', 0x29c, '\rI`\xeb=\xcf\xd0\xc70\x00\x88l\xad\x0fO[5\x9a\xea\xa3\x7f\x1f\xce\x18j\x18\t\x00\x8c\nY\xd4\x10;\xc32\xcb\xc6\xf3a,\xdb(\xf4S_\x9c\xe1p%\xe6u,\xbf\xbf\xa6UK7K\xac\x03\xbe\vI\x06\xa2H\xbd\xbej\xdb\xfa\x83\xe61\n\xfc3\xec9\x90\xd9\x04\xea\x00\xea\x00Y\x99\x15q\xc9\x04\v\xe7\xa3\xfa\x99g5\x85kd\xb7\\~Lx\xdcL\xc3\xd82\xc5\xf4)b\xe1*\x96\xcajX |\xb4\xc7_\xd8\x94\xbd\x9e\x96W\xc2\xeb@\xa7g\xe8\x00\xb3Q\xa4\xedp\x84\xdf\x0f2\xa3\x85e&\xf5s\x98\xb3\x94\xe0\xbf\x02\x82\xa4kd\xa0\xc5`\x05,Fg\xba\xbb\x00n\x12,\x1b\v\x16_*\t\xb4\x8e\x04\xce\x06Q\xd5\x81\x91\xec\xa3Nn\xd6\xf4\xfd\x82Q\x14\bj\x89X\xe4\x03\x19%\x1c\x9a\xd1\x1auC\r\x92?\xb8\xeaf\xb7=6UB\x1f \x00\xca\x7f\xee\x928\xe6\x84\x91\xee\t2W\x11\xc2\xdf\x03\xd0\xa2^|\xb9\x93-\x99(\x84\x10\x874\xf9\xf1\x12\x89\xba\xd3\xc7\xbf\x80\xbf\x18@\xfb\xd1\xa41\xcc\xe1\x16+.B\x93\n}\x91\f-\xd4\xd4\x14kq\x9b\xc8\xb7\xb7\x01y\xe3r\x939\xfd1\xd3\xb6\x8a:\x1bP\xdd\xe9S\xdb\x00\xf6\xa8;n#`\x15,)B\xbd\xd7\xcb\xe2n1\xfb\xb7\xebC\xcf\x8f\xe52i\xdf\\\xf3n\x99rr\xb6\xcdY\xa3\xbb\xaf\x1a\x9f\xbcN\xad\xc02\xb3V\xe5\xa7\xf2s', 0xef, 'C\x01\x02,\x9e#o\xc0\xad\xf1\xa0\x80X\xc5\x0f\x05g\xcbKq\xdc\xda7\xc1\a\x9dW\xfa-;\x14\xa9\x82\x86\xeda\x1d\x99\xbb@!j\x9a\xf7vv\x17P\xddr\xc4\x8a\xd5O\xbcH\x1e&@\xbaE\x80\x8a6\xe0\x1d\xf6!\x06,\xa9\xf5\xe4W\x94Vy\xef\x83\x8e\xf0<\xa5%\xffMA4\x04g\xde\xfd93\xc5/\xb7\x84\x8f\a\xb7{\xc3\n\xf0\xcc@\xba\xea\xe0\xd9\xf63\x87\xc9\xb7~\xe8\xe4\xe4\xf8\xa1\xe7\xf1\xde \x0f\x84\x11\x8f\xf3z\x86\xa8\xae\x81\xb9B$\x00ym\xeaF\x1f\xd7O_\xcc\xf8\xec=S\x9e2\xf2L\xf6\xfeu\xe9\xab\xe0\xdd\x11N\x87\xe0s\x9d\xe4\x91N6\xea\n)O\x8a\xceB\x9e\x96\xb1\xd7\x8a\xd9\x98W\xbdd\xa7f\x83\b\x9b\xc6\xbe\x1b\xebC\xc2\xb7\xfeQ\xaf\x8bl\x04\xdaO\xeaWk\xb0q}\xe1G\xae\xf7<\x19\xdea\x8d\x8c\xb1\xba9\xde\x98(\x84\rl\xe7\x87\xf1', 0x5e, '\xb7\xc6#Jj\x81\x8e\xaa\x8b\x83\xc3R\x18\\\x87\xe7\xe6O5I\xdf\xe7\x90\xfe\xd3\xf3\xc53\xa2\xffd\x99_d\x85JJ\x03{\xc7\x80?`\xc4~E\xa8M\x8beXv\xcb`\t\xedc\x93k\xd1Kk\an\x14~UPMv\xe4W\xd89\x82\xd7p\xb6\x1bN~\xd0\xe5\xcf}fT\xe6\xbch\x85\xbf\xf5b'}, 0x2e9, '\xec\xf1\x92g\xa0\xe9@\xbd%\xfc\x01}\xe2\x16H\x99D-\xb7|\xf7i\x11<[\x88\xe7;/vo\'\x86\xf8\xae\x16\xdb\xba\xee\x91]\x13>\b&y0\b\xcb\xea\xa0\r\x00\x00\x00\x00\x00\x001\x05\xd2\aL\x88\xb9\xb3\xfc\xc7\xb5\x06\xb0\x14\xee\xb8$\x9c\t \"\t\xbeNJ\x907\xeee\xa8-\xfdy\x95\xbb\xf84\xce\xbe\xde\xf3\xba8\xfd6\xf2\b\xfbz\xe8\xe5\x85\x84\xce\x01\xc6\x94\x12\xe8\x9f\xfcb\xba&d\x12\\bu\x9f&Z\xff\xf6\x02l\xa4\xb2K?\b\x1b\x91\xb4\x98\xf0\xe3\xb7\x8b\a\x00\x00\x00\x00\x00\x00\x00\xb6\xeb>t\bc\xf5\x88\xfb\xe9mmx\xcak9\xe1!\xafW\x87\x13!\xdcLO{\f\xd5\xfe\xaf\xfc@Lh\\\xa0\xe9\xd6\xf2\x1d4\x87\\\xba\xd0O\x817\a\"\xb1\x90/\x13:,m\"E\xe3r\xcbzV\xb10\x9b\xfcq\xcc\xec_\xa1\xf7\x01fb\'\xe7\xce\xb1\x81\xcd#\xdeP\xb9%\x97_,S\xce\xfc\xb9\xfd\x8b\xca\xbc\xc4+\xa1{hg\xc4\x98\xee\'\x15LDY\xae\x11\x1b\x19\x82\xf9\xcf\xd0\xd2\xdeQW\x00\x00\x00\x81H\x00\x00\x19\xden%rbT+\x90\ruZ\xb0\xf0\x00o\xcay}\xdb\x92\f\xcf\xcd\x9d.H-V\xe0T}\x05G%\x8b\xe0\x9f\xa82\xc3b\xf9!\x17\xc7$\xf4\vG\x92!&qZ$f\xc1l\xf7\x96\x98\xc2\xfa\xb3\x88\xb7GK\xff\xa2\xd8s\"\x96\xd7\xb7\xb4\xff\xd9\x7fK\x95j\xa68\xd1\x03\xc5\xf0\xd1\ah2\xc6\x8c\x87|\xb2\xaf\xc4xGy\xab\xbc\nhQ*\x00\xa7\x0e\xcb\x92<=\xfb \rH=8\xae\xfe\xbc\x00\x00\x00\x00\x00\x00\x00|\xa4\x1b\\\x19\x03K\xb1\xd2\xf8\xd3gA\x01\x92\x89\xce\xd8\xa5\b\xf20\x95\xd0\x0e\xa2y\x19T\x8f\x8dd\xf0\xc5B\v)j\xf2Dw\xd4\xd1\xde0uu&\n1\xdc%i\xba\xa8\xc5\x82b\xc7\x9d\xa3_\xf0\xf6`*\xef\x13\x9b\x17\a!\x1e[tSH\x00\xc8k\b<\x8d\x99\xb2V\xdd\xbe\f|mY#\xb3}m\xc7\x92\xc7\xd4\x80T\xa4\xd9\xde\xd2\xf3v\\\x1e\xa7\x9a\x87*\xfd\x1da\xbd7QH\x8a\x1co\x9e\x99]\x05(\xe3\xf2\x03\xc2\xd6=a\x80ip3R\x04\x03N\xben\xc9\xb1\xca\x93\xad\xe9\xdc\x84\x7f^.\\T\x11\xb0N*\xc5\x9dy\x1a\xb3j\xc79\x18\xd8\xb2\xdb\xd1\xeb)\xc9\xef\xd7\x01\xe3\xa9\x11xoQ\xecto0\xf8D\x1b\xd5*d(D\xad\x0f\xfdL\xfa\r\x00\x06\xd2\xb6H[\x7f\x8eN\\e\xb9\".\xa1q\xdb\xdb(\x0f\x82\x8aBL\xbesH\xc87\xd1\x13\x1b\x9e\x8d\xa4\x04\f^\xbf\xca7\xdf\xc3\x82\x13\xd4&\xceh\xbaq\x00\x9a\xb6\vf\xd6+Vg\xe7\x14\x81\xaf\xc8\xfdX\xf6~\xc9pC\x97\xa63f\x89\xa6\xbb\xb2+5\x9d\xcc\x8e\x8f\xc3\xec\x89YY]\xb91|l\xff\x1e\xa9g\xeaK\x9c+\xbd\x9e\xd7\xbb\xe2\xb0\xcfmF\xf8\xd7\xae3\xe5'}}, 0x87f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 685.739451][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.749933][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.759893][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.770653][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.780598][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.791676][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.801559][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.812093][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.821954][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:13:09 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(r0, 0x0, 0x0) [ 685.832428][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.842396][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.852873][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.862756][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.873394][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:09 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 14:13:09 executing program 4: r0 = open(&(0x7f0000001e80)='./file0\x00', 0x105043, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x14, 0x1, 0x7, 0x3}, 0x14}}, 0x0) [ 685.883532][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.894438][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.904413][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.914902][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.924773][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.935253][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.945209][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.955905][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.965957][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.976534][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4) 14:13:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}) 14:13:09 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r0, 0x6, &(0x7f0000000040)) [ 685.986420][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.997074][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.007015][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.017841][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.027907][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.038422][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.048488][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.059030][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.068893][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.079352][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0xcbda861163631552) 14:13:09 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000600)={0xa8, 0x75, 0x0, {0x9d, "25f5b12db25486d385c8be89b812781f6260482e30dd7a6fd989c000d68be6cb32c8cc59488b87be15b8f1b5ca796024530400000000000000527afeed25f3881965724c08d3fc37e048a41f46f1b025548932d59f2129f4feab88dafd6424fe315d89229119385a9f2450689661b3a47f1f5a8bbbf82871df012af5aeb5a0d383db679c330230fb81a7613c8864097b5a7841c4d145096e3142d2016d"}}, 0xa8) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) [ 686.090063][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.100546][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.110650][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.121555][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.131429][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.142132][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.152071][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.162539][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.172412][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:13:10 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x5450, 0x0) 14:13:10 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 14:13:10 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xa9, 0x75, 0x0, {0x9e, "25f5b12da264a6d385c8be89c88483459b8a8fb7e631fcbe609d840a5a0df5af2862ce60a7377ed49dd656494ede7f514117f1fbd0eb98d63a4f3fc5dd131bbfd9069bc999fe6e6907a67d3e42af3cd5fe3776bfcdd5b7b138db58f94e633cf36a9e7e201a373817cd9aa299c0cb999713440ac75f6b91b861ba99e37b6bbeea5300d65d087162b14fc011b1f0e11ccbb1fbba5ae0e224d32a36c6f59052"}}, 0xa9) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) recvmmsg$unix(r4, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 686.182895][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.192874][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.203420][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.213283][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.223804][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.234056][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.244584][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.254691][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.265186][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.275110][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:13:10 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5451, 0x0) 14:13:10 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x89, 0x75, 0x0, {0x7e, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d040000000000000000000000000070d4502d3dd15ffbd4d621068bfca19e922fb757988a7eb397c95b3bff648818ff8dc06d780fe410bcde08774e562519f9aafc66889eee22ab92360a5d14933a73756c12452bdb3e7738afaa42e15dd527"}}, 0x89) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RLERROR(r1, 0x0, 0x15) [ 686.285624][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.295482][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.305949][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.315884][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.326363][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:10 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x48, 0x75, 0x0, {0x3d, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f"}}, 0x48) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340), 0xffffff46) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 686.336253][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.347152][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.357510][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.368252][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.378141][ T3371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.388634][ T3371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.409354][ T3371] batman_adv: batadv0: Interface activated: batadv_slave_1 14:13:10 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14:13:10 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000fc0)='/proc/keys\x00', 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x0, 0x0, 0x0) 14:13:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x4004090) [ 686.439760][ T3371] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.448657][ T3371] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.457429][ T3371] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.466266][ T3371] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 14:13:10 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) fdatasync(r1) [ 686.517100][ T5823] veth0_vlan: entered promiscuous mode 14:13:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5\x00\x04\x00\x00u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,zn\x1c4\xaa\xc2<\xad\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xaf\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95\xf0\xb5G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\x9b\xc6\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\xf3kv\xdf\xf9\x91f\x11\x86\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\x02X-\xfc\xfd\xb8O\xc9y\x82\\\x9dx\xb2\x86 \x1a', 0x2) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x78) sendfile(r0, r1, &(0x7f00000001c0), 0x8) fcntl$addseals(r1, 0x409, 0x8) rt_sigreturn() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 14:13:10 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x30, 0x75, 0x0, {0x25, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a"}}, 0x30) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000340), 0xffffff46) dup3(r4, r3, 0x0) rt_sigreturn() writev(r3, &(0x7f0000000340)=[{&(0x7f00000002c0)="c4", 0x1}], 0x1) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:10 executing program 4: setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'0000000000000000000000000000000', 0x31}, 0x20, 0x0) truncate(0x0, 0x9) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x2a01, 0x190, 0xa}, 0x18) setxattr$incfs_id(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)={'0000000000000000000000000000000', 0x30}, 0x20, 0x2) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) setxattr$security_capability(0x0, &(0x7f00000005c0), &(0x7f0000000600)=@v1={0x1000000, [{0x200, 0x7}]}, 0xc, 0x3) sendto$unix(0xffffffffffffffff, &(0x7f0000000640)="7de01a3f3437b2acd2efed64c81c16f925c3e2d945e1e47e6e208965f4cbbffc5fd24dc3d3cb55412b4e004b982902595ce8c76b4389ae61f07cc92292d4428c9863e7322e047852749209006130b81442ad497f2f41b986d1f0ce86b6e324c4a15ef5f12a5b5630f24faac85e424a82085f90c21cbeca35b4bb64d5ba5637cef39ea827ad43e526d986061c56c62229912b362b58309f2ef404c0472aee362fe70961bba11fd195a15164a5cbb209883e1c3f07c46b99aa80967e1d48c2ea8e44", 0xc1, 0x2004c150, 0x0, 0x0) dup3(r0, r1, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000740), &(0x7f0000000780)={'L-', 0x6}, 0x16, 0x0) 14:13:10 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000280)={0x67, 0x7d, 0x0, {{0x0, 0x40, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdae, '', 0x3, '$#!', 0x1, '#', 0x9, 'trans=fd,'}, 0x12, '\x84\xd9\xff{\x99\x8b\xd9%\xa4K:\xd4}\x99\x061\xd28', 0x0, 0xee01}}, 0x67) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 686.580176][ T5823] veth1_vlan: entered promiscuous mode 14:13:10 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x33fe0}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0x15, 0x7, 0x0, {0xc, '\a\x00\x00\x00\x00\x00\x00\x00\x101@/'}}, 0x15) 14:13:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/power', 0x0, 0x0) dup3(r0, r1, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0xb, 0x0, 0x0) 14:13:10 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0x1d, 0x75, 0x0, {0x12, "25f5b12db254a6d385c8be89b81278a781e7"}}, 0x1d) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 686.647453][ T5823] veth0_macvtap: entered promiscuous mode [ 686.673880][ T5823] veth1_macvtap: entered promiscuous mode 14:13:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={0x0}}, 0x0) [ 686.711078][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.721708][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.731654][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.742198][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:10 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) [ 686.752440][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.762971][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.772862][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.783331][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.793198][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:13:10 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000040)=""/184) 14:13:10 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) rt_sigreturn() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 686.803707][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.813599][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.824227][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.838234][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.848837][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.858774][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.869343][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.879247][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.889723][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.899577][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:13:10 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) syz_genetlink_get_family_id$fou(&(0x7f0000000680), r0) 14:13:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x5450, 0x0) 14:13:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/time_for_children\x00') r2 = dup(r1) r3 = dup3(r0, r2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000040), 0x4) [ 686.910215][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.920262][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.930770][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.940741][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.951244][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.961193][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.971710][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.981579][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.992237][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.002118][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:13:10 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) r1 = socket(0xa, 0x2, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xc2}, 0x1c) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 687.012591][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.022551][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.033043][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.042982][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:13:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) r2 = fcntl$dupfd(r1, 0x0, r0) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) ioctl$BLKROTATIONAL(r2, 0x127e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = gettid() tkill(r3, 0x14) [ 687.053543][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.063461][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.074056][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.084059][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.094550][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:10 executing program 2: pipe2(&(0x7f00000124c0)={0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5451, 0x0) [ 687.104481][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.114947][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.124871][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.135394][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.145484][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:13:11 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000280)) [ 687.156159][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.166037][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.176650][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.186553][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.197051][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0x40086607, 0x0) 14:13:11 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000d40)={0x5a3, 0x7d, 0x0, {{0x0, 0x3cb, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xe6, '\x00\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x02\x01X!\x04\xe1[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0\x9a\x0f\xba\xef\'[\xd2;S*\xfc\xb1\xc9Q\f\xca\xd8\xda\x19\xf5\xcf\x13\x11\xd1\b\x90>\xa3\xf6\xb4\x1b\xaf\x9e\xdbM\x17@\x8e\xb9\xb2J\xec\xb1\x99\x95m\r\xe8\xb5\xf2{\'\x11+gUf\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xfem\x1d0aU=\x1eE\xe9w\x1f\xc8j<^\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xd6\xf1\xb3\xe3\xffc\xd5\xb4\xe6K\xcc~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee\xe6\x19\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80', 0xd, '\xf1\x96\xc94\xaf=v^\x98\xd7\x13\xdb-', 0x1a3, 'C\x01B,\t+o\xc4\x04\x00\x00\x95\x1d\x8528\x9a\'\x19\x0f1\xca`\x0f_\xc6[$\xac\xe7\xd5b\xf4\x9d\xd8\xc5\x00\xef\xe4\x1c\xae\x11<|J\xc8\xc0\xd1\xab\xd6\x9f\xd9\xce\xdd\x03\xdf\xe4-\x00\x89\x87\xd2O\x7fD|\xe7\x1e\x89\xd5\fh\xeb\xf9\x17\x7f\xa7n\xd5\xaa\x10\xeb\xdf\v<\x13\xe6B\xed\x04\xb2\xf0h\vh\x96\xfa\xd8M\xd5\x17SX\x98\v\xc9\xc80\xd8\x06\x00\xfa\x107mc\nnw\x1b-\xe1\xe1\x87\xb1(\vM!&\xd7s\xae\x99u\x7f\x91\x87|\xc8\x02\xe2{JL\xf4\x1a\\\b\xd2\xb0\x04(\\\x99\xbd\xa1\xb9\x82\xa4\x12S\xd0\x93\xbc\xd8\x159\xdfc&\x1bK\xa3\x0f\xe3@\xd1W\x18\xbc\x11\xb9 \xa9Q\x1f~}@g\xe2i\x1c&\xb5^\xa1\x1d&{\xa3\x0e\a\a\xfa8u\x13y\xbfN\xd8Q\xbdb\xb8\x1d>\x83\xe4\xae\x87G^\xb2\xe2\xd8/\xb3\xbdQ\\:X\xbc\auc\xcf$gT\xdf\t\xd4#U\xa6C\x88\x0e\x1c\xf0\xd3g\x87\x90{\xc8V\x1b\xbd\xfa \xe7Q\xf0n\xe0\xca\xeb{\xbe/4q\xea:\x12\xd1\x05<\xc3Zvv$\xa2\xb9\xd3\xf0\xf94\x90\x1b\x18!6\xce\"\x99\x8egP\x86\xc6\xc2\x859O)\xbb\xa8\xeb_\xea\xed\x9b\x88\x82k9\x9cp!\xdb\x93\xebB\xd4\xef\r\x8e\xf1y\xbd\xc6\xea\xa9Ot\x98!\x14\xc0\xf5\x95\xf9\x81\xbbq\xecQ\xbc\xd6\xef\xa68JvW\x00\v\x1a\xe3U\x16\x18/>\x9crRi,\xe5?\xa4\xb1\xee\xd2n\xa8\xday\xd8\r\xe5\xf1\xbe\xe3T\x05\x98\x99\xfa\x8b\x89a\xcc7\r\x8f)R\xf8x\x056O\xef!\x9a', 0x102, '\xd5\xaad\t\x04I\x9e7\x15\xeac\\\xe8\x8dZ\xb0\xac8!\x95\xeb\x92\x15\xe3@MJ\xd2\xb6\x85\xd3\xd4\xd1`d\xbc\x93\xc3[K\x18\x86\xe6\xd2\xf8\xd6\x06\xe1/\x11\xb8n[^\xb6U\xeb\xd1\x17\x91\xf2\xc4\x92\x94ku{\x83\x05[\x1d^\xd1gf\xc6\x87X\xcf\xf9(1t\x01\x1b\x895 >ft\x88-\a\xfd\x8c\x12\x11\b\xe7\x10\xdc\xccw\x81\xb9\xbcYe\xaf\x89ikC\x03:\xcc\x03TK.\x01\xa9\xff\n\xfb\ba\xcb\x04]]\x1a|\xfdV\x18;\xc9\xdcNO!\xad\xf7\xcd\xad\xddW\xack\xf96\xcbc\xdf\x9c\xccD\xec\x01z\"\xd7\xac\xc2bc\xf6\x05e@Q\xbfz\xe0\xd2\x02\x00\xea\xb4\r\x9b/~\x03\xb9\x0fK\xec\xdf\xfebw\xe7\xfd53\xd9\x17q\xa1D\x01l\xc8\xc0|an\x9d9\xfe\x97\xa6\xf8\xc4\xa3A]h\xa4\xc0n\x0fj4e\xd9\xeewM\xa6\xb1\xa8\xb1\xa9\xb9V}\xbf\xcd\xb0\xbb\x919#\xd7\xac7\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x1c3, '\xea\x17\xaag\xa0\xe9@\xbd\n\xfc\x02}\xff\x165\x99;/v\xef\'\x86\v\xaf\x16\xdb\xba\xee$z\x85K\x17T^22=\xf4\xd0\f\xeb\x8a\b\xd2\xea\xa0\r\x00\x00\x00\x00\x00\x021\x05x\xf7\xea\xfbw\xcaw\aL\x88v\xcb}\xa0\x90\xe7f\x9c\t \"\t\xbeN\x94\x12\xe8\x9f\xfcb\xba&r\x12y=\x7f\x80D\xb3*Dbu\x9f&Z\xff\xf6\x02l\xa4\xb2K?\b\x1b\x91\xb4\x98\xf0\xc3\xb7\x8b\xb2\xd3\x0e\xe4\fv\xdaE\x958\xb0\xe3p\xd6\xea\x94\xb9K\xbdL&\x10\x05\xea>\xe0a=\x83a\x12{l\x8d\x12>6q.\xe6\xb9\xa3\xa9s=\x14\xd7\xfb^[\x1d0\x03\xa9\x9bc*0s9\xbd\x05r\x0er\x81\xa1\xb4K\x91\x02\x00\x00\x00\x00\x00\x00\x00\x9b\tv\x00\x00\x00\x00\x7f\xa4L\x89\x0f\xedk7\r\xbb\xe5)\x10$(\xe24\xcb\xa7\x1f,\xcf\xeat(\x12\x12\x1d\xbe\xc4\x85\x90\xfd\x13P\xcf[&\v\xcc\xcc\xea\xd7\x8a\x9bM\xcf\x06E\x1cc\xd5\xa4\xca1^+\\h\xca\xa7\xc2\x93\x147\xc5\xc2{\xb1\xde\xe5\xeb\x13\xb7l\x9a\x04A\xf6\x16M\xef\x9a\xca\x83\xaf\xacwNE\xff\xc0\xe2v\xa3\xed\xbbH\x01\xda=E\x89*\x80\x1e<\xa7\x9f\xaf(\x1d\x0e\xd0\xa5\t*\xea\x18<\x04p\xe0\xed\xf8oW\x84%\x86F\x84\xeb@\xb4\xde\x1f>y\x9fB\xadU\x12\x99\\swN\xee\x12\xda]\xd8\xdd\xc0q\x80\x91\xf2\x9fW\xf9\xb0/ASd\t\x00\x00\x00\x00\x00\x00\x00\xeb\x87\x15))\xdc+\xf5\x15wP\x1e`,\xf5/G\xf5\x0f\x0e\xc9J{\xa0N\x8c$6Y\xf9\xb8\xc9x3\x8a\x1c?]{]\xd6\'\x83\xec\xdd\xba|\xab\xe2#\xfd,\xab{\xfa\xa6w\xc8\xe3\x05\xffU\xc0\x19\xf4aK\x1dX\xf5'}}, 0x5a3) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r3) wait4(0x0, 0x0, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 687.206930][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.217611][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.227489][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.238321][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.248276][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.258813][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.268842][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.279309][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.289173][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.299741][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:11 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) [ 687.309675][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.320145][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.330020][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.340668][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.350542][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:13:11 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0x3b, 0x75, 0x0, {0x30, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0"}}, 0x3b) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 687.361023][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.370939][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.381532][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.391678][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.402208][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:11 executing program 0: r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001f80)='./file1\x00', &(0x7f0000000000)={0x40}, 0x18) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0x5450, 0x0) 14:13:11 executing program 4: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, 0x0, 0x0) [ 687.412048][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.422523][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.432408][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.442883][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.452924][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.463470][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.473456][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.483968][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.493821][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.504308][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:11 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x105043, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)) [ 687.514279][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.524750][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.534605][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.545102][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:11 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000011c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 687.555140][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.565615][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.575530][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.586054][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.596020][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:13:11 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) write$cgroup_int(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 687.606496][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.616443][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.627064][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.637224][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.647730][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:11 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x1d, 0x75, 0x0, {0x12, "25f5b12db254a6d385c8be89b81278a781e7"}}, 0x1d) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r5 = dup(r4) write$cgroup_pid(r5, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 687.657746][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.668295][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.678152][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.688641][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.698493][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.709351][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.719284][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.729768][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.739728][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.750273][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:11 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x41, 0x75, 0x0, {0x36, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b187"}}, 0x41) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x33fe0}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f000000de00)={0x0, 0x0, &(0x7f000000ddc0)={&(0x7f000000cd80)={0x14}, 0x14}}, 0x4000884) [ 687.760115][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.770577][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.780437][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.791319][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.801293][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.811788][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.856262][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.866455][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.881566][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.891813][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.902276][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.912178][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.922641][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.932558][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.943202][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.953238][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.963820][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.973917][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.984463][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.994322][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.004789][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.014676][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.025141][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.035957][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.046468][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:11 executing program 4: r0 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5', 0x0) r1 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r2 = dup(r1) write$cgroup_pid(r2, &(0x7f0000000080), 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x11, r1, 0x0) sendfile(r1, r2, &(0x7f0000000100), 0x6c03) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)) 14:13:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'pimreg0\x00'}}}}, [""]}, 0x34}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{}, {0x0, 0x989680}}, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) 14:13:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_names\x00') ioctl$BTRFS_IOC_FS_INFO(r0, 0x5451, 0x0) 14:13:11 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x63, 0x75, 0x0, {0x58, "25f5b12dc45605000000be89fb42c7882f892ef38ad44019ca72c1a7554b887b0e472b7c32586c4358e4da32696976c7d8b61b2503c9c7b69cc082d973147e99ce650eb8ab36486a190cd81e6e6c85ceda1cacb3086d99aa"}}, 0x63) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 688.056338][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.071615][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.081660][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.092234][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:11 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x63, 0x75, 0x0, {0x58, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc3"}}, 0x63) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 688.102228][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.112787][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.122657][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.133180][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.143095][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:13:12 executing program 3: r0 = io_uring_setup(0x3e6c, &(0x7f0000000040)) ioctl$BTRFS_IOC_INO_PATHS(r0, 0x5451, 0x0) [ 688.153570][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.163527][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.174027][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.184022][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.194547][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.204446][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.214968][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.224828][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.235290][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.245157][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:13:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5411, 0x0) 14:13:12 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x7b, 0x75, 0x0, {0x70, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f497d049fb75f016bcaa6043859189a0484f83b61835272c6c0b9067c033b29f5865f1edae5de79b512bcf8d2a9f127f327e115"}}, 0x7b) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340), 0xffffff46) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:12 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x22, 0x75, 0x0, {0x17, "25f5b12db254a6d385c8be89b81278a781e7af607c15d1"}}, 0x22) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r5 = dup(r4) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r5) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 688.255630][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.265477][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.276039][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.286094][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.296585][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.306593][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.317135][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.327062][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.337570][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.347512][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:13:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat2(0xffffffffffffff9c, &(0x7f0000003500)='./file0\x00', &(0x7f0000000000)={0x149842}, 0x18) dup2(r0, r1) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0), 0x4) 14:13:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14}, 0x14}}, 0x0) [ 688.358050][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.367876][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.378453][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.388294][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.398784][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.408644][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.419342][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.429239][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.439808][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'ip6tnl0\x00', 0x0}) 14:13:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r2 = getpgrp(0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r1) socket$packet(0x11, 0x2, 0x300) tkill(r2, 0x14) [ 688.449667][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.460157][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.470015][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.480524][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.490467][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:13:12 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f00000009c0)={0x556, 0x7d, 0x0, {{0x0, 0x3f5, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1a1, '\x00\xfd\x134UT*C\xa4\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x02\x01X!\x04\xe1[\xe5q\xb6\xd88\xd8\xfa\x0f\xe2\x90#U\x18\xb89G\x1d\xc7p\xc2\xfe\xfb}\xf1\"E\xec\xb1\xc9\x00\x00\x00\x00\x00\x00\x00\x80\x13\x11\xd1\b\x90>\xa3\xf6\xb4\v\xaf\x9e\xdbM\x17@\x8e\xb9\xb2J\xec\xb1\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x00\x80\xf66\xa6\bi\xff\xb5Yk\xec\xe2\xcb)\x983\x86\xfem\x1d\x03\x00\x00\x00\x1eE\xeee\x1f\xc8j4^\x94\x82\x01\x03\xa5\xbc\x01\x00\x01\x00s\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xd6\xf1\xb3\xe3\xffc\xd5\xb4\xe6K\xcc~PW\xf5J\xe8\xcf\xb7\xae\xe8\xee\xbb/\xf6\x9f\xcb\x8ac#\xa2\xf7\xe6\x19\x10_\x81\x02P\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80-\xe3:\xe0$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d3u>\x94\xf1\x8e\xa4\x15\x95\x1a\x11{\x91N\x92\xc8\xcf\x97\xe9\n\xdf\xaa-\xff\x8c\x0e\x86\xda\xa3/\x8c)\x00\x00\x00\x00\x00\x00\aI\'\x11Mf\x91\xf5\xb9\x7f\xb2\x9c\x1f\xac\xc2\x9f\x1a=\xc4u\xbf\x94\x8c\xd1Q\xcaA\xfa\xf2\x14\x01S\to\xb8\x86\'\x18P\x89\x8b{\xb6s\xe0-\x05\xa6k{\x9a\xe8\xad\xeb#\x1b\x15\x18\xd5\xc2P\x963\xa4la\xd9\x1e\x8d\x1f-\x15\xbb\a\xe5$\xa30\x00\xb42K\xc7\xa7C`R\xb8\x90f\x12\x8c\xc2\xb0\x00\xb6\'\x98\xc6;u\xfd\x87\x9a6\xf9\x84\x7fK\xe4\xc6\x9c\xa2\t+\x86\xdc\x9a\x98\xee\xd5P\xf3\xbc\x81\x9a:\x86\x86\x89r\xd7\x0eG\x05\xd9\x1f\xe9A\xce\xed\x8f', 0xfa, '\xf1\x96\xc1\x01\x00\x00\x00\x00\x00\x00\x00\x95F\xb84\x0e\xaf&q\xb2\xd0R}0*VlN#2P\xe03\xbd\x03\x8cJ]B\xef3\x82b\xf4\xad\xf4L\xb2NLf\x89\x8fOc:\x8b\xc8[\xad9t\xa5\xc97\xa0F\x1d,\xb2\xee\xab\xec\a\xf0\xbf%\xdfEy\xdf\x0f\xa4\x0f->\xa4*\b\x96\x8df\'\xdf\xa2\x83\xce\x82 \x88(\x94\xca\x13\x12\xd2\rA\xaa\t\xe6\x10g\xff\xd6\x15\x86\x95\xfdG\x15nb\xd3\x8cxV7q:Ul\x92\xc7.\xab,\xe7\xa8\x19Y\x03\vN\v\x12\xc3\x9e)\xef\x89W\x88\xd1\xf6\xe7i %L2k\xa2\x7fmy\x8b\xfejClxBYI\x11\xb6\xb6M\x1em\xd1\xe8n\xca\xe2\f\xbb\xe5\xb9\xe5\x02\x9a\x11\x12\xde`4\xbes&\xd4\\\xd1\x18\x19`\xff\xce\x7f\xd4A3q\v\xe5m\x85\xeb\xa2d\xed12\x9a,\x05A\xd9\xa0R\xa2\xfc3g3\xf6k\xe4\xa5\xb2g\xe7\x82g\x00\x00\x00\x00\x00', 0xb7, '\x04\x04\x00\xdd\xfe&\xc1\x18\xf3M\x99\xca\t\xc1\xdf\a\x10Z\x81\x18\xbb\x1fSvr\x1c\xa8\xb7\xe0\xe4s\xd9\xee\xa9Kx\x89\xd6%^#X\xe4\x1e\x8e\xf0`\x0f\x926Z\xf2\x0f\xba)\xea\xc9\xc0\xe4\xc6/\xa0nf\x0f\xc9\xcb \xfdt\xb0\x19,\x8d\xbb(\xe1\x17\xbb&\xb0^\xc2\x06#oA\xd9Lq5\xd4\xb0\xca\xfcf\xccz\x94\x00\x00]\x11\x83\xad\x14\xf6\xe2\xe2F\x8e}\x86\x019\x87\xd4\xdeJ\x84pI\xac\x12\xa4.\x1a\xc1s\xec\x88\x96yj\xc7\xe8\x94uvx\xb4\x85fCZ\x82\xcf\x06\x18\xbe\xa9M\"E\xb99\x1dw\x0f\x00\x88\xfd\xf2\xa3\xa1\x0f\x14\'\xf8K\xa7\f\x90\xac-\xa5\x89\x12\x18\xedI\xa5\x81\x9d\xda\xb4\xf60\xc7Q\xd6\x90\x1eF@\xe3\xd8\x17:\xebw]2\xaaV\x9c\xda\xbb\x92<\xee\xf5\xc8q\xdc\xa5\x8c\x95\xda\x99\xa1\x92\xdc\xd2\xaaa\xban\x00\x11z\xf4\x94\xa3\"\xb1\f\n\x80\x0e\xd2\xa3\xe0jV\xae\x05\ac\xb4O\xc2\x86\xfed[\x8e\x16\xd12V;\xafUGV\xdf\x02\xf8F\xb3C\x7f\x98\xb4\xe9$!\x11\xf1\xff\xd8\xd7b\xb4\xf6U\v\x9c\xab\xbbq\xda\x94+\xc4\xef\xbb[\xef\x8a\xcc!\xed\xc8\x00\x8e-GD{\x81\xc0GF\xfa\x83\x10\xe4p\xf1\xaf\x1e \xa0\xef\xe8\x8a\xc1e\x85@\xd2\xe2t\x92\x00Op\x178`\xc0\v\xb7n\x1ew~\xd3$\x17\x88\x90&\x86\xfa2\xb7.S\ac\rL\xc2'}}, 0x556) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0x15, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 688.501064][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.511133][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.522022][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.531879][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.542528][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.552470][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.562959][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.572821][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.583296][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.593183][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:13:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) close(r2) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 14:13:12 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000006780), 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000067c0)) 14:13:12 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) [ 688.603681][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.613566][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.624065][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.634012][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.644511][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.654567][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.665137][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.675050][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.685641][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.695636][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:13:12 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigtimedwait(&(0x7f00000003c0), 0x0, 0x0, 0x8) rt_sigreturn() r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:13:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_settime(r2, 0x0, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, 0x0) [ 688.706121][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.716017][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.726511][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.736386][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.747016][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.756940][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.767515][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.777360][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.787859][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.797719][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:13:12 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000000)={0x7f, 0x75, 0x0, {0x74, "25f5b12db25605000000be89b81278a78159fa98ba58cb9ed9ab51551560c2e7af617c15d164c1d26e0a9b4d27da08271b35ef24b33df29933a03032e9cfd9110f48a913c4634907000000654c0f41885d5fd4d0c477d4141834a720020fd01e2d7af52940963a40afc7d80934b5ff256feadbc3"}}, 0x7f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$VT_GETMODE(r3, 0x5409, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:12 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) [ 688.808697][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.818632][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.829266][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.839166][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.849631][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:12 executing program 4: fchownat(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x0, 0x0, 0x0) [ 688.859510][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.870093][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.880096][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.890570][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.900428][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:13:12 executing program 3: modify_ldt$write(0x1, &(0x7f0000000040), 0x0) [ 688.915218][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.925116][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.935601][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.945486][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.955979][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:12 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x62, 0x75, 0x0, {0x57, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280f9c846b7d1f7fabf9614b34419c2394cac12"}}, 0x62) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:12 executing program 4: r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) [ 688.965838][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.976562][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.017145][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 14:13:12 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x23, 0x75, 0x0, {0x18, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164"}}, 0x23) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = eventfd(0x0) read$eventfd(r3, &(0x7f00000000c0), 0x8) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:12 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000001280)={0x7f9, 0x7d, 0x0, {{0x0, 0x76a, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1c0, '\x00\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x02\x01X!\x04\xe1[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0[\xd2;S*\xfc\xb1\xc9Q\f\xca\xd8\xda\x19\xf5\xcf\x13\x11\xd1\b\x90>\xa3\xf6\xb4\x1b\xaf\x9e\xdbM\x17@\x8e\xb9\xb2J\xec\xb1\x99\x95m\r\xe8\xb5\x00\x00\'\x11+gUf\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d%\x00\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe\x1d0\xec\xeb\x18`E\xe9w\x1f\xc8j<^\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xfc9\xd8\xc6\xcc~P\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80-\xe3:\xe0$\x00\x00\x00\x00\x00\x00M\x00\x00\x00\x00\x00\x00\x00\x00\x00&*\x18\xd6\xdf\xb6\xf8\xdc\x1eY%\xf3\xa0B\xd6W\x8b\xa7\x11\xf88V0\xd7\x06\xfe\xd5\x0e\xdc\x86\xd5`\x89\'\x19\xb3+W\x13\xb4]\xaa\xf5\x0e \x90\xf7\xc9\xd4ljG\xcf\x84=\x03{\x04^\x8b\xdb\xf3\x11\xd8\t\x15\x7f/\x05)y\x9e|\x97D\xba\x03\xab\x18q\xa5 \xaf\xdc\xc7\xfc~!p\xee\xf6M(J\xfd2\xc0\x7f\x9f\x9c\xc2o\xd8e\xde/t\xb3\x9a\x1d\x9e\xaf\xa3&M\xb0:4\x896\x03\x84\x88\xd7\xd3l\xe0`P\xaa\xb6\x18\xff\x00O YC/\x01\xed\xb0\x89\xc5\xef\xe9N\x86\x17V\xa9\t\xc2\xb2\xc8\xa1\x93p\xbeQ9a\xd93\x02n\x88\xbel\xef\b\xf4\xd2XBN\xd4\x94\x90t\x80p\xc0t\xde\x8cqY\xde\x96\x8aS\xc4\x88(J\a\x06\x89\xe9\xad\x89a\xf4\xd1\xd0`Y\xe6\x1a\xe8<\bd\xc0_=\xe5$\xf6\xed\xe4|L\xb1\xf1\x04@e\xf6\x9bW\xf1n\xecx\xfb', 0x32a, '\xf1\x96\xc94\xaf=vFO\xb8d\x14\xb4\x1f\x06\x00\x9d\xd4\xdd\x85\x8e\x8e\xf7Z\xd6L\xc6-\x14.\xe4Y|S\xe1\x0e\xe0\xfa\x06d\x1a\xed\x82\\\xff\x91\xc7\xae\xc4oM`\xa7\xd1K\xbbR\x94=N\v{\xa1L$\xadg\xcdl1\x11\xa1H\xdb\"E\x94\xb2_\xb5\x0f\xf5V%\x948\xe6\xd0\xdf7\xea\xc5~\x86\xe0\xa2\xee\xd5\x15\xc4\x16M\xec\v\x93\xed\xd6F\xba\xd5Ek%\x12H\xd8\x9aV\xac\xa3z\x91\x00\x80\xc6\x004\xed\xdbL\xf0\xc2Y\x87^9\xc0\\Q\xaf$H\t\xd6y?\a\x14\xaf\xa5\xeb@b\x96\xca\v\xeb\xc8\xdb\x13\x7f\x87\af\xc2=\xe7\xb5\re@\x9f\nn\xc77\xa5m\x9e\xe9\xa2\xdfd\x99N\xf1d5\x13<\xb4\xdf\xc6 xC?\x02\x95\x9c\xac\xa25\xd9&VP\xb5\xe2;0h\x01\x93:\x9b\bk\xb3\xe9\xec\x16\xaf{\x91\xd7\xa1\xdd\xbd\xaaI~_\xa2n:U\xdf>\x12\xe4\r\xe1;\x8eaNBK?\xcc\f3\r\xff\x91\x11\x9d\x80F\xa8\xc3A\x16C}\xa0\xa3\x10\xa9\xcb~\x03[VYx\xf0\xab]\xb7zW\xe2\x9a\x12\x80\x89\xd6/\xcc\xea\r)\xb7P\vA\x91\x89\xb2\f\x1bv$@\x81\xd9\xaa\x92\xfe\xd3o*}CAg&\xd4W\xcb\x80F\xa6\xd2\'cr2\xf2k\x94\xf2\xb8\xd4\x98\x18\x9b\xde\xc8\xa0\xc5\xa8\xdcQ\xdc\x8f)\xe8\xe8x\x9e\xce\xca\x85\x13\x9f\xf2\xd9w\xa3b\xca\x11]S\x94\nY\xc8<\x94\x9f\x12\xf3y/\x93\xbat^S\x9e\xc6\x03T\xee]\xd5\xb6\x99\n\x8f\xd0\xcc\x9c\xb3e\a\x02\xbci\xf4\xb0 \xd7(\xee\xef\xdb\x19y\x8e\xc8T1#\xe5\x84{\x8aAVr\xcf\xe5\t\x1dr\xe7\xcdr\b\x18\xeb\x0f\xc8\x85\x9d\x9b\x9co\xff\xff\xff\xff\x00\x00\x00\x00\x1dA\xaa\f\xec\xb5\xbb\"C\x82\xcb\xe6\xb4\xa0a\x14\xf0\xd3\xed\xcdR\x80v\x9b\xb0\x85\x1d\xcb\xb4\xef\xd2\xf0\x06LN\v\xcf\xf4\x00\x00\x00\x00\x00\x00o+\xd6\r!d\xf5.c4\x02\xa8\xe6\xcf\xb9\x01\xa4\n\x1ap]S^m\xcab\x1am\xdc\b\xe7\x14\xb5 \x92\xccf\xbf\x05\x05\x15\xe0\xd0V\xa4H\xda\f\x93\x9d=\x02Sl8Sy\xb5?\xad\x98\xea\\MUE\xdb\xecpn\xcf\x01\x7fe\x84\xab\xe5\xe1\v\xeb/\x83\xb6S\x11g\xf5\x8b2\x87\x12!}\b\xd9\xe6d\xac\xc6ma\xa5\x97-\xd2in I\xfa\x96P\xae\xc6KIM\xa0\xa1\xe9\xaa&\x16A\xca\x06\xe3\x8f;\xe2K\n\x16\x82*@0\xa1\xbd;\xb7\xafF\xb4\xe2\x8c>C\x8c(%\xbf^\xc0\xfb9\xb1-\x0e,\xac\x03\xd3\xde\xbb\xc2Y!\x8b\x8e\xc22\xd3l2\xb3r\x00_!\xda@z\xcbt\xa4m\xe9\x9a\xcc\xd7\xe3\xa2\xfd2\xa5\xff\xa5\xcb\xdf\x88\x02\x82\x95 \x8c\x1e\x8a\xef\x04\xe5\xe1\x97\x84\xf8\xc5\xcf\xf3\xde.\xa7m6\tU4\x1f\x95L\xb60\xc2I\xc8\x03\x11\x84k]\xee\x9f\xba\xccA\x883tp2\xf9R;\xdb\xf9%\x9fE`\xbd?\x9ak\xc8\xabX\b:\xbf\xe6\x1f\xe8\x8b\x83i\xe2\xf2\x14\x9d\xd7\xd82euk\xf4\x88\x18+\xa0\xe3\xa5\xefA\x90\xd5\xf4\xe8\xdd\xd8@\xfds\xbe\x11,gPc\xfb\xaa\xf3\xbf\x0eY\xe2', 0x1a9, '*\xder\xe2S\xd1\xde\xea\xf7:\x8a\x1a\x16\xfd\x81\x85\xa2\xd9\x90\xfb\x99\x96\xd4Cp\b\xcbe\x80\xd7\x00\a\x97Y\xbcg\xf5?\xc9$p\xe3\x0e\xdd!\x91he\xe5i\x18\a\x91\xaa8\xd56F`C{\x03+\t\x8dF\xdc@\xb80\x9f\x1a\xca]\xf4B\xd3\x9co\xbe\x7f\x80\xc6v\xc9!X\xa9\xdb\xee/\xe7\n\xfd\x84%\xe2\xf2fG\x8f\xd15Z\x8a\xeey-\x1b\xfc\xe869\x9d\x12\xc5[b\x8a\xb3\xff\x80\xbb|\x82\x94\xf6u\x84\b!\xdbFc\xcb\xa93wCL\x01#\xf8\x12\xf5\xce\xa6\xde^\xf2\xf2\xa0\x81o\xabfKU\xf5y\x80\xdf\xd1\xc5\x99\xaa\xe3\xdb\xe8;\nA8\x88]%\xb3\x94\x11\xb2\xc2\x81\xad\xd9\xdb\xe4\xd5\x105\xb3\xbd\xd2(- 0!B\x9c\xf5\xbc\xe5\x9d\f5\x1aS\xb1\x80\xb9\xb1\b\xb9]\xc0\xea\x92\f\xa8\xf7x\xdb\xc6\xb6`\xdex\xbb\xd4\xd3\xcf~\x89\xb1\xfe\xe9\xbd\xa2O\x83\xc7{@\xbb\xf9\xf4\xd8\x13x\xb3B}\xd7\x14\xdd\x9d\"3;\x80\x10\xb8\\\xce\x15\x008i?\x92\xdc\xe3\xe8\vo\x9f\xa4\xcb\xbbAo\x89}f;nd\v\xfa\xf4\xde\xfa\xb0$\x0f=n\xa3\x95\xce\xbc\x80\x1d/\x88\x84\x9d\xeb \x8fQA\x90CC\xdb$\xa3\x00\xffVEA\x8fn\\G\xc3\xf5\xea\x91G\x9f)\x18\xa5\xed\x9b\bm\xfc\xb1\\\xaa\xf8\xdd\x8e\x1eZ\x02\x00X9\xb9?eu,\xd1\xe9X\x91\xd1\xc8o\xfcBU\x81\x8dM+r\x11o\xd6\xd8A\x85\x95(m\xb2\x81\xf7;!r\xe1\xb5\xe9q4\a.\x16\xd6\xcc\x7fS\xb10\xcd}Bp\x8c\xe8w\x9a', 0xa4, '\xdd\xeeWk\xbdXSN\xe7\x06\xafE\xb1[\x97@\xda\xa8 \xcd\x930\xfd\x82\x89\x9bh\b-\x8b%\x9a8U&\xd4\xa3h\xfe\xb6\x9c\xf6\xcfJu\xf6\xdb\xe0\xd6s\x18!\xed\x1c\xea\x83\x96x/\xb4\xbfG.\f\t\xac\x8cK\xfb\xaf\xeaoT\x17\xd6|F\xefX\x1b&\xff\xff\xff\xff(:/\xb8\x96\xb9\xa2\x92\x88\xe9Y![\a\xb2J\x8b\x90\xd9\x7fC\xd6\xa1\xf2<\xed@\xa0G\xb5\t\x9a\xd9\xc2z\xa45#\x84\xe2\xae+W\xfa\x14\xf4r\r\xa6NK\xcc\xf3?\xee\x9c\x00'/164}, 0x7a, '\xea\x17\xaag\xa0\xe9@\xbd\n\xfc\x01}\xff\x16H\x99;/vo\'\x86\v\xaf\x16\xdb\xba\xee$z\x85K\x17\f\xeb\x8a\b\xd2\xea\xa0\r\x00\x00\x00\x00\x00\x001\x05x\xf7\xea\xfbw\xcaw\aL\x88v\xcb}\xa0\x90\xe7f\x9c\t \"\t\xbeN\x94\x12\xe8\x9f\xfcb\xba&r\x12y=\x7f\x80D\xb3*Dbu\x9f&Z\xff\xf6\x02l\xa4\xb2K?\b\x1b\x91\xb4\x98\xf0\xc3\xb7\x8b\xb2\xd3\x0e\xe4\fv\xdaE\x95'}}, 0x7f9) creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) [ 689.063794][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.072770][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.081611][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.090451][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 14:13:12 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x20, 0x75, 0x0, {0x15, "25f5b12db254a6d385c8be89b81278a781e7d164c1"}}, 0x20) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001740)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x7) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 14:13:13 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x1b, 0x75, 0x0, {0x10, "25f5b12db254a6227ff0e55d8c2ea551"}}, 0x1b) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x2e, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) write$P9_RWRITE(r3, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:13 executing program 3: sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x14236f47bdafc572) 14:13:13 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigtimedwait(&(0x7f00000003c0), 0x0, 0x0, 0x8) rt_sigreturn() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 14:13:13 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001140)={&(0x7f0000000500), 0xc, &(0x7f0000001100)={0x0}}, 0x0) [ 689.263218][ T27] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:13:13 executing program 3: setreuid(0x0, 0xee01) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000005480)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005440)={&(0x7f00000052c0)={0x14}, 0x14}}, 0x0) 14:13:13 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0x5450, 0x0) 14:13:13 executing program 3: r0 = io_uring_setup(0x6db8, &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x5451, 0x0) 14:13:13 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup2(r1, r0) r3 = accept$unix(r2, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, 0x0, &(0x7f0000000080)) 14:13:13 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) [ 689.358372][ T27] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:13:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffda5, &(0x7f0000000180)={0x0}}, 0x0) 14:13:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) dup2(r0, r1) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14}, 0x14}}, 0x0) 14:13:13 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x4e, 0x75, 0x0, {0x43, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7da2e53b47eb85867e370e17f497d040e7d71"}}, 0x4e) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x2e, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 689.462489][ T27] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:13:13 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000000)={0x3c, 0x75, 0x0, {0x31, "25f5b12db25605000000be89b81278a78159fa98ba58cb9ed9ab51551560c2e7af617c15d164c1d26e0a9b4d27da08271b"}}, 0x3c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) accept$unix(r3, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) dup2(r0, r1) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000009c0)={0x14}, 0x14}}, 0x0) 14:13:13 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$setlease(r3, 0x400, 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000980)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK'}, 0xe) 14:13:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 689.545335][ T27] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.585149][T31765] chnl_net:caif_netlink_parms(): no params data found 14:13:13 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000000c0)) 14:13:13 executing program 1: r0 = io_uring_setup(0x5672, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000008780)={0xfffffffa, 0x0, &(0x7f0000008740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x6) 14:13:13 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x19, 0x75, 0x0, {0xe, "25f5b12db254a6d385c8be89b812"}}, 0x19) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) 14:13:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88c42, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001280)) close(0xffffffffffffffff) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000014c0)) 14:13:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r2, &(0x7f0000000400)={0x70, 0x75, 0x0, {0x65, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280ecc846b7d1f7fabf9614b34419c2394cac12c3f8cf087045607edf5b5b1d8182"}}, 0x70) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) rt_sigreturn() recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$P9_RLERROR(r2, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:13 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x34}}, 0x0) 14:13:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0}}, 0xc001) 14:13:13 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000005140)) 14:13:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) 14:13:13 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) [ 689.793977][ T27] bridge_slave_1: left allmulticast mode [ 689.799867][ T27] bridge_slave_1: left promiscuous mode [ 689.805630][ T27] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.817729][ T27] bridge_slave_0: left allmulticast mode [ 689.823608][ T27] bridge_slave_0: left promiscuous mode [ 689.829443][ T27] bridge0: port 1(bridge_slave_0) entered disabled state 14:13:13 executing program 2: pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0x15, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:13 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x48, 0x75, 0x0, {0x3d, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6f"}}, 0x48) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:13 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x33fe0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000000)=0x80) getsockname$unix(r1, 0x0, &(0x7f0000000180)) 14:13:13 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, 0x0, 0x0) 14:13:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$KDGKBDIACR(r1, 0x4b4a, 0x0) 14:13:13 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000d40)={0x85b, 0x7d, 0x0, {{0x0, 0x69c, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1ae, '\x00\x00\xe9\xcd\x9f\xdb\xfcf\x9a\x93wB\xd2\a\xb9N\xdb\xb0\xe0\xf8\x85\x02OG!\x04\xe1[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0[\xd2;S*\xfc\xb1\xc9Q\f\xca\xd8\xda\x19\xf5\xcf\x13\x11\xd1\b\x90>\xec\xf6\xb4\x1b\xaf\x9e\xdb\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xc8j<^\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xc3\x96mN\xf7\xd6\xf1\xb3\xe3\xffc\xd5\xb4\xe6K\xec~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee;/\xf6\x9f\xcb\x8ac#\xa2\xf7\xe6\x19\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80-\xe3\xba\xe0$\x89\xbe\\\x15\x10A\x13p\xb0\xf5\xaa\x98\xbf\x03\n\x1a\x82J\xf6Z\xa6\xc3\xc6\x144\f\xc2\xfdR\x87cp\xef\x82\xa0\xb7\x1d\t\xec^\xd8FO9X\x86\xe6\xe8\xaf\x83\xaa#Wa\xe2\xb2\xdfd\x1d\xe9\x9c\xe1\xad\xc0\x1c\xbc\xe1L\xee\x8b,\xfcm\x8c\x81\xa7\x17W\x04\xd2\x89W\'*\x10(\x1bS\x11\x80\x1e+Dw\xed\xe0\xd7a\x9dz(U3\x9b\xcf\xde\x03\xe6\x95S7.\xd7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00C\xf4\xb6\x15\"0\a\x95\'\x1b\xdb:\xbc\x05\x9c\xa1\xe3\xd1z\xdb\x83,@_\x0e,B\xd7&J\xb3\xad7~qp\x1bN\xbb3\xff\x02\x00\x00\x00\xccf\xe0qK\xccd\xac\xa3r\xd64\xb2\x00\x1f\xef\xfcD\xf5\x96\x01\x1a\b5\x06/\xd0nD\x9bU\xac\n\x01<\x83\x84\x9f\b\x9f\x8a\x12\x90\xc5T\xff?/b<\xad\xac*\xa8\xb8\x9e\xce\xb2\xf6{\xbc\xe8\x89r_]\x19\xfc&\xd0\x87\v\x13\xc7\x13SL\f\x820\xbc\xc0\xfa\x16\xc9\xd2wl\xe5\x11+\xb4\xb2\x96\x82pC\x1f<\xc8\xcc\x9b\x03\xe0*\xe3\xe8\xac\xa7\x7fk\xfe\xc6\x8eJs\x7f\xfa\xf3\xf6\x1e\x875\x8b\xef\xbe\xb4a2-L\xf1\xb7\xc5.\x80\xcb$\x13\x93\xbe\f\x96\xee\xd0,\xaa#\x95\xaf5\xb4\xbc\xaa`>\x8cTC\xe7%\xdb8\xeeO\x0e\xd0\x16\x84\x1e\xc36\x9f\x1f\x91XL=\x1e\"\xd4\np2\xbc\xd8A\x14\xca\xa4j\xe0\xa3\xfb+:[\xcc\x8e\xbb\xd3C\xaf\xc1o\x90S\xda\x82\'\xeaY2\xf1\x02D\xa4_tY\xaa\x8d\xc1\xba!d\xbe;\x85\xe7\n\x02R!\xd6+\xec\xb4KW\b(\x1a\xb2\xa1\xa6\xac`\xbc\xd6\xe7-\xaf7&\xa9\x8c\xf1\xb5Lt\xa1\x97L\xa8\x1a\x01\bL\x03\xca7\xd5W_\xccu8a!\x92-\xf6\x03\xff\nZ\xb7\xde\x1c\xf7\xe7\xbc\xf1[K\xe5\xf9\xa0y\x02^a\x12\x90|\xab\x15\xefR\xd7c\x88>\xa97>\xb5CA\x0f\x02\xa8\x9f0I\xcacU\'\n\xfc\xf6\x8e\xa8V\xc4v\x1c\xf7`\x12\xdf\xbb\a\xdc\x1c{\x95\xbf\xb8\x9f\xc2%\xcc\x16\x80\xbd\xe4\f\xdbY\xee\x82\x03?8\xe9\xb6\x17\xa9\xde*\xe1&\x03\xa8\x85\xc9\xbb<\xe5DD\xbf\xc0\x10\xacj\xecm\xe8\x8c\xa2i\x85\xd0\x05v,\x93\xf7\x84\x01W\xc5\xb0k\xf3T\xa8\xa9\xd7\xf5\xc0\xe86z\x89\x84\xdc\x8e\x17{\xd2\xfcsR\xa2\x82\x06\xd1\xa5\xe3\xc2\xdaGNB\xad)\xd2k=\x1e\xf8\xb0\x1a\xf3X\x9a5\x1e\x8aUT\x93x\x1e\xce\xee`\'\x93\xc28\xc2', 0x263, 'ur^\xeb\xe8\x83L\xc9\x15\xc4+Ef\xd7\x81y\xf5\xd5\x11\xe2-{\xc3\xdf\xfc\x1fz: \xd8\xc1o\x16m\xe8<\xbc\x99\xd7#\xfe\xb2\xb2\xfb[c\x14\xcb\xbc\xa0\x1f)f\x11\x17B28f.\xadk\\\x9eB\x83\xbe\x05\xaaA\xbbf\x9f\x1bI\xbc\xaa\x80)\xa2\x8a\xaa\x159|\xddTqy\x01(\f\x06\x13R%W\x12H8\xf62n\xfeo\x81\xf7\xc0 \xd0\x9e\x80\f\xc5\xa9aw\x19~\xef\t7\xf9\xf9\xba`S\xc1LZ\x8b\xda\xd7\xd8M\xfb\x9b\x80\xbf\xb1w(\xc4\x02Hl\x92V\xbb\x05\x80\xcaG\xef\xb3c\x14\x8fi\xf8\xdf%;\xdb\xf8\xa6\x17\xdf%\r\x971\x7fl\xf0\xe5\xb9\xaa\x03\xba,r{,\x80Z\x02\x95\x02;\x93U\xd5\x0e\xbbO\x82\t\xa2\xf3\x18W\x14\xecJ\xb3\x01A\xce\xe5\xb7Q\xd9\x95\x95\xd3\"#;\xa2S0\f\xe3\xa3\a\xb1b\xd2+\x96\xe0\x92\xa9\xe8\xf8\xcam\xe0\x04\xe1\xf6`2Y\xec\xedg\xb0\xf3\x16\x86z\xcb\x14\x01v\x00\b\x00\x00\xb5\xc7\xd55\xbeY\xd7\xc6\x8ew\xda\xe9\xa6@R\x1f\xe4\xb3\xf8\xff\xff\xff\xff\xff\xff\xfff\"w\x7fG\x97\xc3S\xb9\x19\x80\"\x8c\xa4\xd4#f\xfc\xa4\xfbc5{(}\x1c%\xad,\f\xdd\xe9Mg\xae\xc8\xeaS\xe5!\xe2\x8ey\xf0\x01\x04D\xb0-\xf76\xa2\xbbZ\x9b\xe4\a9\x87\xdb\xd7\x8f\xed\x92\x18\xec!\xfbXN\xda/\xf6\t\xdd\xc4\xc7\x1c\x05=~\xbb\xc2\xd1>\x02Q\xcbw\xf5\x18\x9d\r\xb5m\x1c\x03\xee\xf1\v H\xc1y\x8e\x9e\xae\xb3=\xebrc\x1a\xe1,\x8f\x89\xb7\n\x12\xb1\xd4G\x92\\\x10W\x87\xccB\x92\xb0x\xa4\x1c\x11pOB\xf1\xea\x90\xa6RPU\xd1\x8c\xa4a\xddf\xc1\xd8\x10\xf0M\x98\x86\x99\x10\x8d\xf4\x03\xa1^y\xc7\xc4\xf8h\x9e\xa7\xe9^z\x8b\xca\xf5\x01B\x9b4\xb9\x849*`\xc0\xe8\xfd\x84\xb8\x7f\x9f\xff\xe4pc\x89\xa5\xc0 \xb3\x9aZ\xee\xc7V\x1b\xd5|\xd9\x82\xf6n\x9a\xd0I\x9b\xc6~\xd1\xb8A\xf7\xce\xe3\xb6=\xe4\xed\xbe\xad\\\xb4\x8a`yi\xdcH^,5\x91\xed\x98,B\xcd\x00\xa5\xba\x1e\xf3\f\xd7\x03\xb2\xc0\x9a\xec\x8b\xf8\xe4V\xe6\x05\x9e\xef\x1d\xcf<\xcb>\xd7.{\xb5)\xdf\xce\t.v\x8b\x19;h)\xa1A\xd8\x06x\x13\x051\x16\x7fmE\x95>\xfb\x05\v\xb8\xc8\x13\xb2AF \xbb\x9aB\xe2]\x93\x00\x00\x00'}, 0x1aa, '\xea\x17\xaag\xa0\xe9\xc3\xe0\x17\x16\x01}\xff\x16H\x99;/vo\'\x86\v\xaf\x16S\x03\x16\xde`t5\x001\x05x\xf7L\x88v\xcb}\xa0\x90\xe7f\x9c\x13 \"\t\xbe^\x94\x12\xe8\x9f\xfcb\xba&r\x12y=*Dbu\x9f&s\xff\xf6\x02l\xa4\xb2K?\b\x1b\x91\xb4\x98\xf0\xc3\xb7\x8b\xb2\xd3\x0e\xe4\fv\xdaE\x95\xee\xad\x0f\xb3\xf0\xc1Cx1\xcd0\n3\x1dO\x00\x15\\\x93\b\xa1\xb9\xb9\xc3\x9f\x98Fk\xa7\x05\xc7\xb0\xc2@e\xdc\x9bR\xa8\xa8F\xff\xbdL\xb0kr\xe3y\xbf0\xb9(a\xe0\x12\xe4\x86\xb3\xd8\xca_\x81I&\x03\x1eXR`BG\a\x01\xb39\xea\x98\x86z\x83\xed\xa7\x82^\fy\x00\xaa\x12\x18&\xd5\xf4\xecP2\x16 \xf2\x88\x9e\xab\xc1\xa9?\f\x8dD\xa1Y\xba\x9cx\xa5nr;\xc1\xa8\xc6\x83NZ^\xcaT|^\x10\t\"\fC2\xcb\xbf\xda\xc1\x06\x95\x8b\xce!\x85;]\xb3\x95\xe5\xb3Fh:/E\xa1\x81\r!\xfe\xd6$>\xe3\xc9\x9b\xca\x85KS\f\x1c6U\xde\xdd\x19\xed:7t\x91T\xb2\xd1\x1b\xc7S*\x9d\xe0\xce!\x83\xa3%\"Y_\xed\x05\xf5\x12v\xbe\xbaI\xad\xdfE\xabXV$B\xf2\xd0\xfbxA\xb6t\t\xfd\x9c\xf4\x13n\xf0d\xe7\xe5\xee\xdb_\x0fC\\\xb1/\xc0s\xba\x87\"c\xb5r\x96\xfdKv\x9d\xde]\xa0\x9fC<\xedC5\xaa\xb9\xf5\x17\x8e-nX\x19m\xb8z) `\xd5<#p\xac\xb9\xb8(\x81o\xf5\x85\xa0\xc3{V\xdd\xf4\xe1n\xbcZ\x94\x06\xe6\xae\x13\x06\xb3D\xce\x10\xbeUK\x0f\xb6P\xa9\xa2\xa5\n\xb1\x8d0xffffffffffffffff}) sendmsg$nl_xfrm(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) recvmmsg$unix(r2, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}}], 0x1, 0x0, 0x0) io_setup(0x8, &(0x7f0000001d40)=0x0) io_submit(r3, 0x1, &(0x7f0000003300)=[&(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001d80)='d', 0x1}]) [ 690.043596][ T27] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.073588][ T27] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface 14:13:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) [ 690.101321][ T27] bond0 (unregistering): Released all slaves [ 690.122071][T31765] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.129324][T31765] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.137544][T31765] bridge_slave_0: entered allmulticast mode [ 690.145699][T31765] bridge_slave_0: entered promiscuous mode 14:13:14 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}}, 0x0) 14:13:14 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xc4, 0x75, 0x0, {0xb9, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63986e851b0cb4be35de2edfe3b50591fcb4fab33eb62a9cd3e323f0037587fa02aeaabc0adcf60b3aabafc5faa766166c227cadd6b1a8cbc5cd9cf33d007ccac5f5c26a"}}, 0xc4) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) write$tcp_congestion(r3, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000010c0)=ANY=[@ANYBLOB="010000000000000003000000e9"]) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) [ 690.165277][T31765] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.172451][T31765] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.186534][T31765] bridge_slave_1: entered allmulticast mode [ 690.195028][T31765] bridge_slave_1: entered promiscuous mode 14:13:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$unix(r0, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) 14:13:14 executing program 2: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x02ppp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacvaHknh\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02\xfb\xf2\xe7}\ra\x97F\x00'/166, 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000080), 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, r2) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 690.231727][ T27] hsr_slave_0: left promiscuous mode [ 690.239944][ T27] hsr_slave_1: left promiscuous mode [ 690.256444][ T27] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.264323][ T27] batman_adv: batadv0: Removing interface: batadv_slave_0 14:13:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 14:13:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000540)='./file0\x00', 0x21000f, &(0x7f0000000240), 0xfe, 0x50c, &(0x7f0000000600)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) futimesat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) [ 690.289602][ T27] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.297392][ T27] batman_adv: batadv0: Removing interface: batadv_slave_1 14:13:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) dup3(r0, r1, 0x0) write$P9_RLINK(r1, &(0x7f00000000c0)={0x7}, 0x7) 14:13:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000000c0)) 14:13:14 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x2f, 0x75, 0x0, {0x24, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000"}}, 0x2f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x33fe0}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 690.341240][ T27] veth1_macvtap: left promiscuous mode [ 690.346828][ T27] veth0_macvtap: left promiscuous mode [ 690.353214][ T27] veth1_vlan: left promiscuous mode [ 690.358670][ T27] veth0_vlan: left promiscuous mode 14:13:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r0, 0xde34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x13, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000200)={@mcast2}, 0x14) 14:13:14 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x14a042, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000b00)="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") 14:13:14 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$watch_queue(r0, 0x0, 0x0) 14:13:14 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$cgroup_devices(r0, 0x0, 0x49) 14:13:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89058bf00"}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) close(r1) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2006) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1b) ioctl$EVIOCGUNIQ(r1, 0x80404508, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = gettid() tkill(r3, 0x14) 14:13:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) write$selinux_attr(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) 14:13:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000040)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup3(r0, r1, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, &(0x7f0000000a80)) 14:13:14 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000680)={0x13, 0x75, 0x0, {0x8, "25f5b12db254a6d3"}}, 0x13) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:14 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xc6, 0x75, 0x0, {0xbb, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280ecc846b7d1f7fabf9614b34419c2394cac12c3f8cf087045607edf5b5b1d81827247e7ec48d36e808d155fa8568c0de7bc129ed91c21ef6ab6ba061e10bf89b63718ce760a3dbb61032d3575eff8e55f8a0642b282da7cc79bd28b01930abdd6bd6eaa0c7a2ba68a1715868414715747693ead1e2abb"}}, 0xc6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:14 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x805002, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x1100020, &(0x7f0000000200)) 14:13:14 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x94, 0x75, 0x0, {0x89, "25f5b147b2eb183aec9e5692d6e8fd89601f9644adc64b35e4b26a8881cea3f71692d7f47262f49051c3d231afd1a75e8ca80c4cd63d18d79ae83e6b1a3403009f634dd06749720111145d451e9b3d82bd2bf4f19f780d14142f4beb2ed1e794106b2caec53a95397d94cb721186ba9811358c69e587edd6078d2d47b189bcf59325662eee345e11ca"}}, 0x94) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:14 executing program 1: r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', &(0x7f0000000000)={0x440}, 0x18) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x5451, 0x0) 14:13:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @loopback}, 0x52) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 14:13:14 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000680)={0x8b, 0x75, 0x0, {0x80, "25f5b12db254a6d385c8be89b812f5a77682aa0c989b1925f65d153d3277202637c096bdcdda178167e9aa79416ce4f4a952507bdb03faf1adbf90ddd9fd183ca3d5eae4656238177bb5b88d76d85ceb4836f8f91b2d4f8e4c9c88bfbbe9938cd64340aad427c25e3657acd8c4a263dad2c9044c2f67c61b55ed66a0584fa0f8"}}, 0x8b) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 690.694072][ T27] team0 (unregistering): Port device team_slave_1 removed 14:13:14 executing program 2: setreuid(0x0, 0xee00) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000fc0)=""/252, 0xfc) [ 690.739944][ T27] team0 (unregistering): Port device team_slave_0 removed 14:13:14 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x24, 0x75, 0x0, {0x19, "25f5b12db254a6227ff0e55d8c2ea55180e463e354b0c498fb"}}, 0x24) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x2e, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) write$P9_RWRITE(r3, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={0x14}, 0x14}}, 0x40) 14:13:14 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x2b, 0x75, 0x0, {0x20, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04"}}, 0x2b) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:14 executing program 2: r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) 14:13:14 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0xaf, 0x75, 0x0, {0xa4, "54a6d385fbc6b82e1657176e17f7e200be89fe949fdcc8ae6e389a93f1e2d9078a32107df90748ba4b0af5aaa6b3e5da7379ebbf73bcb75bac9148e52d20f786c49019725689cf515372fe843afd070000000000000002b5777fd8ebc885851028bfe2d28b17a0c7b286d51c6a64e43176894c3d217755577da5ac2a9e0d4e672cbeb3babbe5470bbfcb1dca1a261cf7b50cae0dfab4ba852f76544e9cf20fb98038ae82"}}, 0xaf) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = eventfd(0x0) read$eventfd(r3, &(0x7f00000000c0), 0x8) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:14 executing program 3: r0 = syz_io_uring_setup(0x342f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), &(0x7f0000000480)=ANY=[], 0xfc, 0x0) 14:13:14 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x42, 0x75, 0x0, {0x37, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7da2e53b47eb8"}}, 0x42) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) write$selinux_attr(r3, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000008280)={0x0, 0x0, &(0x7f0000008240)={&(0x7f0000006000)={0x4c}, 0x4c}}, 0x0) [ 690.934701][T31765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.971752][T31765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 14:13:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) r2 = io_uring_setup(0x104c, &(0x7f0000001440)) sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r2) close(r1) dup(r0) 14:13:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') dup2(r0, r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 14:13:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:13:14 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000400)={0x3c7, 0x7d, 0x0, {{0x0, 0x28f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x17b, '\xae\xad\v\xae\x05\x00\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x02\x01X!\x04\xe1[\xe5q8\xffh3^\xc4_\xd4\xf4\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0S*\xfc\xb1\xc9Q\f\xca\xd8\xda\xb7\x13X\x0e\xf5R\x89\x02\x1fD\xf6#\xa4\xedS\x90\x19\xf5O\x13\x11\xd1\b\x10>\xa3\xf6\xb4\x1b\xaf\x9e\xdbM\x17@\x8e\xb9\x00J\xec\xb1\x99\x95m\r\xe8\xb5\xf2{\'\x11+gUf\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\n6\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xfem\x1d0aU=\x1eE\xe9w\x1f\xc8j<^\x94\x82\x01\x03\xa5\xbcp[\xaaB\xf6\xd6\xf1\xd5\xb4\xe6K\xcc~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee;/\xf6\x9f\xcb\x8ac#\xa2\xf7\xe6\x19\x10_\x81iP\x17W\xba\xe9\xd6\xf98\x02\x00\x00\x00\x00\x00\x00\x00$p\xb0\xf5\xaa\x98\xbf\x03\n\x1a\x82J\xf6Z\xa6\xc3\xc6\x144\f\xc2\xfdR\x87cp\xe0\x15\xfc-\xef\x82\xa0\xb7\x1d\x06\x00\x1d\xe9\x9c\xe1\xadU\x1c\xbc\xe1L\xee\x8b,\xfcm\x8c\x81\xa7\x17W\x04\xd2\x89W\'*\x10(\x1bS\x11\x80\x1e+Dw\xed\xe0\xd7a\x9dz(U3\x9b\xcf\xde\x03\xe6 b\xd8\xab-\xfc\x00\xff\x04b\xb8\xe3\xcd\x02\x15\xdb\x16:\x8cG\v\xa4l\xae\xc8\xe6\xc0S\xc3\xa4x\x00'/379, 0x19, '\xf1\x19&\x8e\xdc\xb7\xb0}\xe1\xf9\x9dr4l*\x97\xc7b/h\x7ff8R|', 0x70, '\x80\xea\xc0j\r\x15\x18\xbd\xe3\x00\x00\xdd$\xaf\xee9\xe1\x80\x9cg\x1bU7\xdd\xeb\xb6H\xd8\x87nH\x9c\x84$\xb9N)9\x8bQgI\xa95x\x8f\rz\x02`\xc0j@f\xb8\xf5MS\xac\xa8;M\x1c\n\xb1\xd1\xab\x97\xb2\x14m\xb8\xcb-mu\x05UF\x95\x189\x95\xd5,u\xd5?j,\xdb\"\xab\xd4\xcc\xf9S\xd99E\xb2\xba\xc4\xbb>\x16=\xc8\x14J7\xf3', 0x58, 'tlans=fd\x05)[\xa3\xb4\'\xa1$\xbe\x03\t\x05\xf9\xbb\xfc\xe7\xcf3X\xeb\x8b\xee\xfb\xdd\xcd\xed\x1az?\xc1R3\x06O4\x99\xf1\xc9\xbd\xc1;\xc1\xf0\xc6\xd3~\x81\xfe\xedo\xd2,V\x9f%xx \x9f\x0f\x8a\x8b\x88\x81\xc7\xa7\x92R\x97\x8e\xf0\x9e{\xae\x86f\xeb\xc4.L'}, 0x123, '\xea\x17\xaag\xa0\xe9@\xbd\xe6&\\\xf5\xf2\xf1\n\xfc\x01}\xff\x16\xe6\x99;/vo\'\x86\v\xaf\x16q;z\x1b\x06\xb5\xf2\xa7\x15\xd7\xa0;p\xdb\xba\xee$z\x85K\x17\f\xeb\x8a\b\xd2\xea\xa9\r\x00\x00\x00\x00\x00\xe21\x05x\xf7\xea\xfbw\xcaw\aL\x88v\xcb}\xa0\x90\xe7f\x9c\t \"\t\xbeN\x94\x12\xe8\x9f\xfcb\xba&r\x12y=\x7fbu\x9f+Z\xff\xf6\x02l\xac\xb2K?\b\x1b\x91\xb4\xcb\xb0^\x16mb\xf1W\xf8\x989;^\x89\\\xa8&c\xc3\x80O\x10\xb5u\n\f\xb7S\xc0\xa4\xfe\x04v\x1f\x0f9\xb5\x18\xc2\xa4e\xdc^\xfaJ\x1d\t\r\x14tl=q\xd6\xf5O\xa8\xde\xa3\xff\xdfvv\x9e\xa6\xee~\xd9n\x90m\xf7\xdc\xd8\xfb\xa5\x90\x1a\xc5r\x1da\xff\xc7\x8ar\x92\x00\x00\x00\xe6\x05R\x15\x1b\v\xb4\xa2\x01\xd2!XmR14\xf9\xc1\xcb\xec\xe6\xde\x83E\x95w\x8d\xb6\xde\x89\xaaQ~\xa0\xf0\xb8[\xdd\xd0\xc7K+\xa5n \x13<7Z\xba\x0f\x7f:\xf6!\xe8\x81\x84\x01\xb2S\xfbT|\xf66\x8a\x04\xc9\x15\xaf\x00\xc6\xa6\xc0\xcez\xf2m', 0x0, 0xffffffffffffffff, 0xee01}}, 0x3c7) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 691.039945][T31765] team0: Port device team_slave_0 added [ 691.057626][T31765] team0: Port device team_slave_1 added 14:13:14 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x5d, 0x75, 0x0, {0x52, "54a6d385fbc6b82e1657176e17f7e200be89fe949fdcc8ae6e389a93f1e2d9078a32107df90748ba4b0af5aaa6b3e5da7379ebbf73bcb75bac9148e52d20f786c49019725689cf515372fe843afd07000000"}}, 0x5d) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = eventfd(0x0) read$eventfd(r3, &(0x7f00000000c0), 0x8) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 691.119412][ T5659] ================================================================== [ 691.127552][ T5659] BUG: KCSAN: data-race in copy_process / free_pid [ 691.134084][ T5659] [ 691.136406][ T5659] read-write to 0xffffffff8605c618 of 4 bytes by task 8920 on cpu 0: [ 691.144475][ T5659] free_pid+0x80/0x170 [ 691.148560][ T5659] copy_process+0x19c5/0x1f80 [ 691.153255][ T5659] kernel_clone+0x16a/0x570 [ 691.157761][ T5659] __se_sys_clone3+0x1b5/0x1f0 [ 691.162536][ T5659] __x64_sys_clone3+0x31/0x40 [ 691.167223][ T5659] x64_sys_call+0x1538/0x2d30 [ 691.171914][ T5659] do_syscall_64+0xcd/0x1d0 [ 691.176434][ T5659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.182337][ T5659] [ 691.184663][ T5659] read to 0xffffffff8605c618 of 4 bytes by task 5659 on cpu 1: [ 691.192211][ T5659] copy_process+0x15d8/0x1f80 [ 691.196905][ T5659] kernel_clone+0x16a/0x570 [ 691.201414][ T5659] user_mode_thread+0x7d/0xb0 [ 691.206097][ T5659] call_usermodehelper_exec_work+0x41/0x150 [ 691.212008][ T5659] process_scheduled_works+0x465/0x990 [ 691.217480][ T5659] worker_thread+0x526/0x730 [ 691.222088][ T5659] kthread+0x1d1/0x210 [ 691.226176][ T5659] ret_from_fork+0x4b/0x60 [ 691.230605][ T5659] ret_from_fork_asm+0x1a/0x30 [ 691.235383][ T5659] [ 691.237706][ T5659] value changed: 0x80000214 -> 0x80000213 [ 691.243425][ T5659] [ 691.245748][ T5659] Reported by Kernel Concurrency Sanitizer on: [ 691.251903][ T5659] CPU: 1 PID: 5659 Comm: kworker/u8:7 Not tainted 6.9.0-rc4-syzkaller-00031-g96fca68c4fbf #0 [ 691.262062][ T5659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 691.272130][ T5659] Workqueue: events_unbound call_usermodehelper_exec_work [ 691.279262][ T5659] ================================================================== 14:13:15 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = dup2(r0, r1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, 0x0) 14:13:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000940)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x2000010) 14:13:15 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) [ 691.330170][T31765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.337227][T31765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.363278][T31765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 14:13:15 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x39, 0x75, 0x0, {0x2e, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477"}}, 0x39) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x14}, 0x14}}, 0x40) 14:13:15 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xce, 0x75, 0x0, {0xc3, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280ecc846b7d1f7fabf9614b34419c2394cac12c3f8cf087045607edf5b5b1d81827247e7ec48d36e808d155fa8568c0de7bc129ed91c21ef6ab6ba061e10bf89b63718ce760a3dbb61032d3575eff8e55f8a0642b282da7cc79bd28b01930abdd6bd6eaa0c7a2ba68a1715868414715747693ead1e2abb2b56a6473f66fcae"}}, 0xce) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 691.383549][T31765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.390747][T31765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.416875][T31765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 14:13:15 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f00000004c0)={0x296, 0x7d, 0x0, {{0x0, 0x276, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xb6, '\xa6\xff<lk\xaa=\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1bW\xf4\xfa\x87Q\xbb\x85\xa4\x92r\xe6s\x97,\a\x83\xc7\xe7&\xde\xc2\xb13\xe3\xcc\xb7\xd0\xea0\xf7\xfau\x1c\xfaQP\x91\xb7\x16\xd1\xfd\xc0\x1d\xf6Fp\x14-\xc9^\xaf\xbeb\x0ez\xb9\xda&\x16\xddA-\xa5L\xc4[\xb7\xf2j#\xb4\bC\x84&\x00'/176}, 0xb, '/dev/ttyS3\x00', 0xee01, 0xffffffffffffffff}}, 0x296) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:15 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 14:13:15 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = dup2(r0, r0) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/130, 0x82) 14:13:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 14:13:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$TIOCGSID(r1, 0x541b, &(0x7f0000000280)) 14:13:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x44000) [ 691.577648][T31765] hsr_slave_0: entered promiscuous mode [ 691.601865][T31765] hsr_slave_1: entered promiscuous mode 14:13:15 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x48c0, 0x0) read(r0, 0x0, 0x0) 14:13:15 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x105043, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) 14:13:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x2ac3, &(0x7f0000000400)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={0x0}}, 0x0) close(r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) [ 691.624048][T31765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 691.644288][T31765] Cannot create hsr debugfs directory 14:13:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r2, &(0x7f0000000400)={0x53, 0x75, 0x0, {0x48, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280ecc846"}}, 0x53) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) rt_sigreturn() recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$P9_RLERROR(r2, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:15 executing program 2: r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) lseek(r0, 0xfffffffffffff60f, 0x0) 14:13:15 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000001840)={0x7f2, 0x7d, 0x0, {{0x0, 0x755, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2e4, '\x00\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8D\x02\x01X!\x04\xe9[\xe5q0\xd8\x03\x00\xe2\x90#\xc2\xfe\xfbj\x01\x00E)\x1bb\xf0[\xd2*\xfc\xb1\xc9Q\f\xca\xd8\xda\x19\xf5\xcf\x13\x11\xd1\b\x90>\xa3\xf6\xa4\xe0\xaf\x9e\xdbM\x17@\x8e\xb9\xb2J\xec\xb1\x99\x95m\r\xe8\xb5\x18t:X\xc9\xcd\xfa\x11\x82a\x8c\x86\xf2{\'\x11+gUf\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85U]\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\fM7\xcf\xa9j\a\x95k;0\x81\x02\x89<\xcb\xe7\x8f\x86\xfem\x1d0aU=\x1eE\xe9w\x1f\xc8j<^\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xb2\xe3\x01\x80\x00\x00x\x9e\xd6\xf1\xb3\xe3\xffc\xd5\xe4\xd4\x03\x9b\x8f\xb2\xaeyJ\xe8\xcf\xb7\xae\xe8\xee\xe6\x19\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80-\xe3:\xe0\x10\f\xc7\x7f\xcb\x1b\xbe_\xf5Z\xf7\xd4\xdd\xe0\xe7\x11xeW\xb5W\x82@\xa4\xb4\xf5\xbb\xd3\x0e`W\x95\xfc\xf0\xbc7\x14\x9f^\xcb\xbe\x9e12\xfd\x82\xdf\xd5\xbd\xc3\xb4\f\x83\xf1.X\x9f\xcd\xdd1\xdc \xec\x01Z\xe5z\x13\x0f\xb1\x1d0\xc1/\xac\xca/\xc5x\'Mc\xb90>t\x99\xd7\x1c\xb59\xd6\xff4\x13\x04\xc1\xdaY\xef\xde\x1f\xeb\x12\x87x\xe2\n\xa1IUd\xd0\xdc\xc9\xdd\x8b\xece\xe3~\xdeVk\xdd\xa48\xbb-RY\x1e[\xdc\x19\x8b\xa6\xd7(5\vg\xb8\xd8[\xde\xd0\xd6\xfcR\xa0\x99\xe0n\xaf\xa1\x89gig\x04\x83\xcf\xe5\xd0\xf7\xbcE\xaf\x8a\x1ea\x80p\xa8\xc6}8C5\x7f1j\x18l\xb0\x8ed\x81\x03\x00\xcfO,\x82a\x92M\xadm\x87\x82b\x19\a\xc7\xdc\xc8\xde\x17\x1f\xc2\x18\x05\x03\xab\x9f(\xd2\x97\x7f\xc8\xd8\xc0\x04\xd2s\xe0\x02\xa2\xcf\xb2\xde\xd3\xbb\xe4\x01\x12\xdc\t\xb6U\x01`\xa0E\x88\xbaD\x92\x05\x17\xe5#45\xf0\x10\x89\x8cH\xc6\x9a\xd2\xb9j\xcdZ\x12\xdd\xf9b\xe3\x92JvU\xe7h\xcd;t\a\x85j\xd0\xdc\xb2\xd6\xff\xcf\a\x10\xaa\xbc\x17\xd7;\x14\x93\xde\xa8HW\xd0\x1e\x03y@,\x98%\xd4\xfc\xbb\xbat\xf4\xc2\xaf\x03\xe8\xaa)\xdf\x90\t\xcf\xa1\xef1\xc6\xbbs\xa0\xd7\xba\xb8\xb2at\xfaIw&\xd8t\xc1\xc8\xceC7\xfbf%\xfe\x11n\xae\xe5\xeb\xc1\xbd\xd0\xa5F\x91\xec\x96\b\xb0\xac\xae\xcb\x93\x90\xc08\xb6\xc1\xae~3^]\x84\xfc\xe1R\xcc\x17N\x90\xf9U\x98\x13\xf0_\xe4s\xbc>*6!\xff\xc9\x17CW\x13k\x97]+\xecZ\xb9\x12t\xea\xde\xb9i\tx\x8am\xab\x14v\x80\x93\xc4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Z\t\xd2I\x94\x16\x15!\xa5g9\xdb#\xb1\xfbQ&\x1cw\xd3 \xfc', 0x23b, '\xf1\x96\xc94\xaf=vFO1m$\xd8*T*\b\x99d\x14\xb4\x1f\x06\x00\x9d\xd4\xdd\x85\x8e\x8e\xf7Z\xd6L\xc6-\x04\x00\x00\x00|S\xe1\x0e\xe0\xfa\x06d\x1a\xed\x82\\\xff\x8c\xd1K\xbbR\x94=N\v{\xa1L$\xadg\xcdl1\x11\xa1H\xb5\x0f\xf5V%\x94B\xe6\xd0\xdf7\xea\xc5~\x86\xe0\xa2\xee\xd5\x15\xc4\x16M\xec\v\x93\xed\xd6F\xba\xd5E>%\x12H\xd8\x9aV\xac\xa3z\x91H\x80\xc6\x004\xc9\x88\xc0e\xdd\b+;9\xc0\\Q\xaf$H\t\xd6y?\a\x14\xaf\xa5\xeb@b\x96\xca\v\xeb\xc8\xc8\x13\x7f\x87\af\xc2=\xe7\xb5\re@\x9f\nn\xc77\xa5m\x9e\xe9\xa2\xdfd\x99N\xf1d5\x13<\xb4VP\xb5\xe2;0h\x01\x93:\x9b\bk\xb3\xe9\x86\x93\xbej\x91\xd7\xa1\xdd\xbd\xaaI~_\xa2n/Z\x1d\xff/@\xbb\xc3W8\xc0\xf7S\xf3:U\xdf>\x12bA\x1a2\x8eaNBK?\xcc\f3\r\xff\x91\x11\x9d\x80F\xa8\xc3A\x16C}\xa0\xa3\x10\xa9\xcb~\x03[VYx\xf0\xab]\xb7zW\xe2\x9a\x12\x80\x89\xd6/\xcc\xea\r)\xb7P\vA\xf9\xff\xb2\f\x1bv$@\x80\xd9\xaa\x92\xfe\xd3\x01\x00}CAg&\xd4W\xcb\x80F\xa6\xd2\'cr2\xf2k\x94\xf2\xb8\xd4\x98\x18\x9b\xde\xc8\xa0\xc5\xa8\x8d\x05\x00\x00\x00\x00\x00\x00\x9e\xce\xbe\x85\x13\x9f\xf2\xd9w\xa3b\xca\x11]S\x94\nY\xc8<\x94\x9f\x12\xe3_>4\xc4\x0fP\xda\t\x12j\xab\xdf\x86\xb77\xa0\x10\xc8\xa0}b\x0f\x86\xa0`,\xe8=\xbb\x9c\xe4\xae\x1alBV\x8a\x12g\\v\x9f\xd0a\x0e.\x00\xeb\x03\x17\xe5e\xf4\xed\xc0\xd9\x8d\xb6]\x98\xc6k\xae\x9fC4\x8d\xe3y#(\xa8\xd8\xa2\x05CR\n\xfdnr\x1b\x96\xb5\xa7\xb4\x01{\xf2\xf1\x90\x19mr+\xe4\xaa\xdc\xbb\x90\xce\xf7\xc2\xfcpr\xa5\xd5;S-\x8b\xe0P\x98\xbc\x8d\xc0\xb0\x17{97\x1bo\xe4 \xcb#d\xdeR\x04\x93/hu\x96WZ\xd4\x0fH\xa4\x1e\xfd\n\xa2\xd5\xe0h\x8dV0\xec\xe4,\aq&\x0e\x0f\xb1\x9c\x0f[\x90\xae\xf1B\xfb\xe9\xa0\xda\xb7c\x8cu\x85\xd9\x9c\x19\xe9\xa1=\x8c\xa9Gts^R\x83\x00\x00\x00\x00\x00\x00\x00', 0x1cd, 'C\x01B,\t+M\xd5\xf8\xa0oM\xda:\xde)\x17\xb8\x12\xd4\x10\xb6\xcbl\x00\xd1\x1a\x9f\x81F\\`NNyDT\xac\xc8\xea^;\x93\x946\x1e$\xc9\x1f\xc2\r\x14\xbc\x80q\xc3GU\x91\xa4fv\xfa\x15\xca\xf5\xf8\xd7\xde\xbf\xb5\x8e\xbe\x98\xcd\x7fa\x191VP\xf5s6\xc4iT7)\xa3\xec\\\xe2[\r\xd4\xd5\xc4.\xb0\xc6\x04d\xf9\xdc.\x0e\xd8\x12\xbb\r\x9a\x9c+$\'\x15\x93\xe6\xfc\xd2\xf1N\xb0$\xe4o\xde+\xa5?\xa0P\x8dd\xe20}/(t\x86&\x0e\xa2xi\x88[\x9e\xb2~\xded\x1c\fQ\xaat\xaa,\ba\x1f\xfe{\xc8L\aaW\xd1\x03f\xf8\xee\x03\xe8\xf3\x17:+\x0f\xae\xad\xd1-&\x11\xa7\xdb\xc5\x06$V\xabR\b\xe6\x1b=\n}\x93 @M\x02\xa7\xcfBf\x1c\x97%\xad\x1cm\xccv#\xed\x92H5\xce`\xc0\b%\xf3\xd3\x97\xb7nq\xa0:\\\xb6r\xcf%\xabi\xcb\xf9N\a\x88\x12\x19\x8fh\xa4Kmt\xf4\xbak\xdc\xb0N\x8a\xdd\'\xf1\xbe\x1e\xd8\'\x8eI\x9fN\x95@6\x12}\xef1\xfe\x81\x8dV\xe1B\x80\xc6+\xae\xec\x9b|\x95\xf5\xc41\xe5\xe4>(\xde\xe9r)\x00\x00\v{\t1\xd5\x98u\xf9[{\x14\"tk\xe0\xed\xc1\xe3\x89[fnVpm0\xabV[\xd7\xa7a\x89\xa00\x1aQ\x05\xce\x95S\x0f\xaf\xca\xae\x04\x00\x00\x00\x00\x00\x00\x00 \x14W\xe3\xab9\xb8p\xe1^\xfb\xf1\xa3MRF\xf7\xa7\xf7\xf107\xd4\x1a\xea\xee\xd9:\xc4\x15\xcd\x7fB\xac<~]\x80\x9a\x9e\a2-\x0fH\xbf\xfd\\\x16_\x9e\a\xed\xbc\xb0\x8f\x80\xea\xe0L\x83\v\x9bn', 0xfffffffffffffef5, '<\xe6\xb6&\x8awi\xd7a\xe5\xbc\xfc*)F\x98\x00\x00\x00$u\xff\xab\xa4=\xbe<\xfc]\x9a\x7f^t\xfa\t>\xb9\x02\xd9\xc7\x833%\x15\x1f\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x88, '\xe2\x17\xaag\xa0\xe9@\xbd\nBuFu\v\x90\x05c/v\x85K\x17\f\xeb\x8a\b\xd2\xea\xa0\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1bw\xcaw\aL\x88v\xe2\x82\xd5\x00\r\x81qVY\xcb}\xa0\x90\xe7f\x9c\t \"\t\xbeN\x94\x12\xe8\x9f\xfcb\xba&r\x12y=\x7f\x80D\xb3*Dbu\x9f&Z\xff\xf6\x02l\xa4\xb2K?\b\x1b\x91\xb4\x98\xf0\xc3\xb7\x8b\xb2\xd3\x0e\xe4\fv\xdaE\x95i\xb5%\xac\xb1\xc6\xa7JJ}M\xe1@\xa7A\xcf'}}, 0x7f2) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) rt_sigreturn() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14}, 0x14}}, 0x0) 14:13:15 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)) 14:13:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000900), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000180)) 14:13:15 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) close(r0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000080)) 14:13:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) close(r1) socket$inet6(0xa, 0x3, 0x6) timer_settime(r2, 0x0, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1b"], 0x28}}, 0x0) 14:13:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x0) 14:13:15 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0x12, 0x75, 0x0, {0x7, "25f5b12db254a6"}}, 0x12) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:15 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0xf, 0x75, 0x0, {0x4, "25f5b12d"}}, 0xf) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x33fe0}}, 0x0) write$P9_RSTATu(r3, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000440)={0xffffff73, 0x7, 0x0, {0xc, '/&\xff\x00\x00\x00Y\xcf\x101@/\xaa\v\xba(\\\x8f\xc0\xbcB\x12\x92=s Y\xc9\x83\xd8X\xaa\'\xb1\xa5\xb7\x8a\xde\x96\v\xdc\x05\x9c\x93\xee\xae6+\xbcVub9\xf9\xf7y\xb1`\x87\x86\xe2\x16m\xd4\x1c\x9cr\xbf\xd7\xfc(n\xb9\x00b\"LF\x92K\xc0\x99\x9c\x05\x88\xbe>sn\x9a}[\xea\xed\xf6^\x89H\xa3\x9b\x16\xaf\xa0\xa5\xf1\xb6\xa1\xa2\x986\x8c\x01\xa1\x13\xc2\xd4\x18\x99\x18r\xf6\x19\x81\xf0\x87x\xc8 \xbf\x99\x87\x87l\x00V\x01%\f\f\x8a\xa4\xb9\x11s\x9a\'X\xff\xc2w\x18\\HM:\"\xc5\xcd}$\xc1\xbf\xdc\t\x00\x00\x00\x00\x00\x00\x00l\xe9\xe3\xb9\xf9\x88U\xb5g\x98\xfex\x94a\xf5\xd3\r\xbb\xd7\xce\x8c\x96\xd9\xcfY&\xa6\x82\x12`D\xdd.\x0e\xf9\t6\x87LT\x1ai*o\x84$\xcdG\x13\xadd\x8e\x8a\xcd\xe0\x02`\xff[\xe9\xbb\xcc/\x91\x06\xbc8\xba\xd3Jc\v\x98b\x88\xcd\xbdo\xe2\\\xbc\x05\xd1\xf8<\xf53\xa6=\xf4\xad\x8b\x1c\xdf\xe2\x9e\xe9\xbd\x1c3;\x9amJ\xa0\x192\xbf=u\xf4I\x9a\x8dSY\xd0\xa3\xda!q\xfcXg\b\xcc\xf6Qk\xb8\xc6\x89\"8G\'\xad>2LR\x0f\xc2\xe4n?\xad\xb4?\xbc\xf6\x1a\xa8q[\xd4e\xc85\xaf\xd1y\x9d\xee}P\xbc\xa0o\xd5\xfe\xb1\xdf\xb3\xfeW\xb51\xd4\x1a\xc2\x16\x97\x9a\xc6lN\x9c\x8d{Y\xa2\xfa\xa5,\xbe\x97'}}, 0x10) 14:13:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 14:13:15 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x46, 0x75, 0x0, {0x3b, "25f5b12da264a6d385c8be89c88483459b8a8fb7e631fcbe609d840a5a0df5af2862ce60a7377ed49dd656494ede7f514117f1fbd0eb98d63a4f3f"}}, 0x46) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) recvmmsg$unix(r4, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={0x0}}, 0x1) 14:13:15 executing program 4: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb82e336200000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 14:13:15 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000500)={0x826, 0x7d, 0x0, {{0x0, 0x667, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1ae, '\x00\x00\xe9\xcd\x9f\xdb\xfcf\x9a\x93wB\xd2\a\xb9N\xdb\xb0\xe0\xf8\x85\x02OG!\x04\xe1[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0[\xd2;S*\xfc\xb1\xc9Q\f\xca\xd8\xda\x19\xf5\xcf\x13\x11\xd1\b\x90>\xec\xf6\xb4\x1b\xaf\x9e\xdb\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xc8j<^\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xc3\x96mN\xf7\xd6\xf1\xb3\xe3\xffc\xd5\xb4\xe6K\xec~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee;/\xf6\x9f\xcb\x8ac#\xa2\xf7\xe6\x19\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80-\xe3\xba\xe0$\x89\xbe\\\x15\x10A\x13p\xb0\xf5\xaa\x98\xbf\x03\n\x1a\x82J\xf6Z\xa6\xc3\xc6\x144\f\xc2\xfdR\x87cp\xef\x82\xa0\xb7\x1d\t\xec^\xd8FO9X\x86\xe6\xe8\xaf\x83\xaa#Wa\xe2\xb2\xdfd\x1d\xe9\x9c\xe1\xad\xc0\x1c\xbc\xe1L\xee\x8b,\xfcm\x8c\x81\xa7\x17W\x04\xd2\x89W\'*\x10(\x1bS\x11\x80\x1e+Dw\xed\xe0\xd7a\x9dz(U3\x9b\xcf\xde\x03\xe6\x95S7.\xd7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00C\xf4\xb6\x15\"0\a\x95\'\x1b\xdb:\xbc\x05\x9c\xa1\xe3\xd1z\xdb\x83,@_\x0e,B\xd7&J\xb3\xad7~qp\x1b\x00\x00\xccf\xe0qK\xccd\xac\xa3r\xd64\xb2\x00\x1f\xef\xfcD\xf5\x96\x01\x1a\b5\x06/\xd0nD\x9bU\xac\n\x01<\x83\x84\x9f\b\x9f\x8a\x12\x90\xc5T\xff?/b<\xad\xac*\xa8\xb8\x9e\xce\xb2\xf6{\xbc\xe8\x89r_]\x19\xfc&\xd0\x87\v\x13\xc7\x13SL\f\x820\xbc\xc0\xfa\x16\xc9\xd2wl\xe5\x11+\xb4\xb2\x96\x82pC\x1f<\xc8\xcc\x9b\x03\xe0*\xe3\xe8\xac\xa7\x7fk\xfe\xc6\x8eJs\x7f\xfa\xf3\xf6\x1e\x875\x8b\xef\xbe\xb4a2-L\xf1\xb7\xc5.\x80\xcb$\x13\x93\xbe\f\x96\xee\xd0,\xaa#\x95\xaf5\xb4\xbc\xaa`>\x8cTC\xe7%\xdb8\xeeO\x0e\xd0\x16\x84\x1e\xc36\x9f\x1f\x91XL=\x1e\"\xd4\np2\xbc\xd8A\x14\xca\xa4j\xe0\xa3\xfb+:[\xcc\x8e\xbb\xd3C\xaf\xc1o\x90S\xda\x82\'\xeaY2\xf1\x02D\xa4_tY\xaa\x8d\xc1\xba!d\xbe;\x85\xe7\n\x02R!\xd6+\xec\xb4KW\b(\x1a\xb2\xa1\xa6\xac`\xbc\xd6\xe7-\xaf7&\xa9\x8c\xf1\xb5Lt\xa1\x97L\xa8\x1a\x01\bL\x03\xca7\xd5W_\xccu8a!\x92-\xf6\x03\xff\nZ\xb7\xde\x1c\xf7\xe7\xbc\xf1[K\xe5\xf9\xa0y\x02^a\x12\x90|\xab\x15\xefR\xd7c\x88>\xa97>\xb5CA\x0f\x02\xa8\x9f0I\xcacU\'\n\xfc\xf6\x8e\xa8V\xc4v\x1c\xf7`\x12\xdf\xbb\a\xdc\x1c{\x95\xbf\xb8\x9f\xc2%\xcc\x16\x80\xbd\xe4\f\xdbY\xee\x82\x03?8\xe9\xb6\x17\xa9\xde*\xe1&\x03\xa8\x85\xc9\xbb<\xe5DD\xbf\xc0\x10\xacj\xecm\xe8\x8c\xa2i\x85\xd0\x05v,\x93\xf7\x84\x01W\xc5\xb0k\xf3T\xa8\xa9\xd7\xf5\xc0\xe86z\x89\x84\xdc\x8e\x17{\xd2\xfcsR\xa2\x82\x06\xd1\xa5\xe3\xc2\xdaGNB\xad)\xd2k=\x1e\xf8\xb0\x1a\xf3X\x9a5\x1e\x8aUT\x93x\x1e\xce\xee`\'\x93\xc28\xc2', 0x265, 'ur^\xeb\xe8\x83L\xc9\x15\xc4+Ef\xd7\x81y\xf5\xd5\x11\xe2-{\xc3\xdf\xfc\x1fz: \xd8\xc1o\x16m\xe8<\xbc\x99\xd7#\xfe\xb2\xb2\xfb[c\x14\xcb\xbc\xa0\x1f)n*\xcef\x11\x17B28f.\xadk\\\x9eB\x83\xbe\x05\xaaA\xbbf\x9f\x1bI\xbc\xaa\x80)\xa2\x8a\xaa\x159|\xddTqy\x01(\f\x06\x13R%W\x12H8\xf62n\xfeo\x81\xf7\xc0 \xd0\x9e\x80\f\xc5\xa9aw\x19~\xef\t7\xf9\xf9\xba`S\xc1LZ\x8b\xda\xd7\xd8M\xfb\x9b\x80\xbf\xb1w(\xc4\x02Hl\x92V\xbb\x05\x80\xcaG\xef\xb3c\x14\x8fi\xf8\xdf%;\xdb\xf8\xa6\x17\xdf%\r\x971\x7fl\xf0\xe5\xb9\xaa\x03\xba,r{,\x80Z\x02\x95\x02;\x93U\xd5\x0e\xbbO\x82\t\xa2\xf3\x18W\x14\xecJ\xb3\x01A\xce\xe5\xb7Q\xd9\x95\x95\xd3\"#;\xa2S0\f\xe3\xa3\a\xb1b\xd2+\x96\xe0\x92\xa9\xe8\xf8\xcam\xe0\x04\xe1\x04\xad\xf6`2Y\xec\xedg\xb0\xf3\x16\x86z\xcb\x14\x01v\x00\b\x00\x00\xb5\xc7\xd55\xbeY\xd7\xc6\x8ew\xda\xe9\xa6@R\x1f\xe4\xb3\xf8\xff\xff\xff\xff\xff\xff\xfff\"w\x7fG\x97\xc3S\xb9\x19\x80\"\x8c\xa4\xd4#f\xfc\xa4\xfbc5{(}\x1c%\xad,\f\xdd\xe9Mg\xae\xc8\xeaS\xe5!\xe2\x8ey\xf0\x01\x04D\xb0-\xf76\xa2\xbbZ\x9b\xe4\a9\x87\xdb\xd7\x8f\xed\x92\x18\xec!\xfbXN\xda/\xf6\t\xdd\xc4\xc7\x1c\x05=~\xbb\xc2\xd1>\x02Q\xcbw\xf5\x18\x9d\r\xb5m\x1c\x03\xee\xf1\v H\xc1y\x8e\x9e\xae\xb3=\xebrc\x1a\xe1,\x8f\x89\xb7\n\x12\xb1\xd4G\x92\\\x10W\x87\xccB\x92\xb0x\xa4\x1c\x11pOB\xf1\xea\x90\xa6RPU\xd1\x8c\xa4a\xddf\xc1\xd8\x10\xf0M\x98\x86\x99\x10\x8d\xf4\x03\xa1^y\xc7\xc4\xf8h\x9e\xa7\xe9^z\x8b\xca\xf5\x01B\x9b4\xb9\x849*`\xc0\xe8\xfd\x84\xb8\x7f\x9f\xff\xe4pc\x89\xa5\xc0 \xb3\x9aZ\xee\xc7V\x1b\xd5|\xd9\x82\xf6n\x9a\xd0I\x9b\xc6~\xd1\xb8A\xf7\xce\xe3\xb6=\xe4\xed\xbe\xad\\\xb4\x8a`yi\xdcH^,5\x91\xed\x98,B\xcd\x00\xa5\xba\x1e\xf3\f\xd7\x03\xb2\xc0\x9a\xec\x8b\xf8\xe4V\xe6\x05\x9e\xef\x1d\xcf<\xcb>\xd7.{\xb5)\xdf\xce\t.v\x8b\x19;h)\xa1A\xd8\x06x\x13\x051\x16\x7fmE\x95>\xfb\x05\v\xb8\xc8\x13\xb2AF \xbb\x9aB\xe2]\x93'}, 0x1aa, '\xea\x17\xaag\xa0\xe9\xc3\xe0\x17\x16\x01}\xff\x16H\x99;/vo\'\x86\v\xaf\x16S\x03\x16\xde`t5\x001\x05x\xf7L\x88v\xcb}\xa0\x90\xe7f\x9c\x13 \"\t\xbe^\x94\x12\xe8\x9f\xfcb\xba&r\x12y=*Dbu\x9f&s\xff\xf6\x02l\xa4\xb2K?\b\x1b\x91\xb4\x98\xf0\xc3\xb7\x8b\xb2\xd3\x0e\xe4\fv\xdaE\x95\xee\xad\x0f\xb3\xf0\xc1Cx1\xcd0\n3\x1dO\x00\x15\\\x93\b\xa1\xb9\xb9\xc3\x9f\x98Fk\xa7\x05\xc7\xb0\xc2@e\xdc\x9bR\xa8\xa8F\xff\xbdL\xb0kr\xe3y\xbf0\xb9(a\xe0\x12\xe4\x86\xb3\xd8\xca_\x81I&\x03\x1eXR`BG\a\x01\xb39\xea\x98\x86z\x83\xed\xa7\x82^\fy\x00\xaa\x12\x18&\xd5\xf4\xecP2\x16 \xf2\x88\x9e\xab\xc1\xa9?\f\x8dD\xa1Y\xba\x9cx\xa5nr;\xc1\xa8\xc6\x83NZ^\xcaT|^\x10\t\"\fC2\xcb\xbf\xda\xc1\x06\x95\x8b\xce!\x85;]\xb3\x95\xe5\xb3Fh:/E\xa1\x81\r!\xfe\xd6$>\xe3\xc9\x9b\xca\x85KS\f\x1c6U\xde\xdd\x19\xed:7t\x91T\xb2\xd1\x1b\xc7S*\x9d\xe0\xce!\x83\xa3%\"Y_\xed\x05\xf5\x12v\xbe\xbaI\xad\xdfE\xabXV$B\xf2\xd0\xfbxA\xb6t\t\xfd\x9c\xf4\x13n\xf0d\xe7\xe5\xee\xdb_\x0fC\\\xb1/\xc0s\xba\x87\"c\xb5r\x96\xfdKv\x9d\xde]\xa0\x9fC<\xedC5\xaa\xb9\xf5\x17\x8e-nX\x19m\xb8z) `\xd5<#p\xac\xb9\xb8(\x81o\xf5\x85\xa0\xc3{V\xdd\xf4\xe1n\xbcZ\x94\x06\xe6\xae\x13\x06\xb3D\xce\x10\xbeUK\x0f\xb6P\xa9\xa2\xa5\n\xb1\x8d0x0}) nanosleep(&(0x7f0000000140)={0x0, r3+60000000}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:15 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x8e, 0x75, 0x0, {0x83, "25f5b12da264a6d385c8be89c88483459b8a8fb7e631fcbe609d840a5a0df5af2862ce60a7377ed49dd656494ede7f514117f1fbd0eb98d63a4f3fc5dd131bbfd9069bc999fe6e6907a67d3e42af3cd5fe3776bfcdd5b7b138db58f94e633cf36a9e7e201a373817cd9aa299c0cb999713440ac75f6b91b861ba99e37b6bbeea5300d6"}}, 0x8e) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) recvmmsg$unix(r4, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) [ 692.073578][T31765] netdevsim netdevsim0 netdevsim0: renamed from eth0 14:13:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000300f9adb5"]) r1 = dup(r0) ioctl$TIOCNOTTY(r1, 0x5422) 14:13:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x48c0, 0x0) dup3(r0, r1, 0x0) sendto(r1, &(0x7f0000000800)="9d", 0x1, 0x0, 0x0, 0x0) [ 692.117871][T31765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 692.146722][T31765] netdevsim netdevsim0 netdevsim2: renamed from eth2 14:13:16 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r3, &(0x7f0000000d40)={0x494, 0x7d, 0x0, {{0x0, 0x387, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x8b, '\x00\x00\x00\x008\xf1\x14\xa4\xe9\xb6\xd1\x17U\xa3_\x8f\\7\xd8\x03\f\xa2\x8c\xbe\xe2O\xe9\"\xeeh\a\xf8\v\\\x91\xfaj|\x8d(\xed\xdbZ\xc0\x94%\x82\xaa\xe9\xbc\x88FJ(\xbeY\xb3T\xc6@lr\x9b*9\x00;e4\xb5XbtV%\xe2\xf7\x95\x1a\xa6L\xa4i\xbd\x96-\nS\x92\xfcz\xf0\x99C\x9f\xbb9\xc5J\xc6]P\xf0\x87\xd3\v\x9f\x89$\xf5\xf3\xfa\x93[_k\xd3\x03\x1aQ\x00-(\xa2\xd8\x91\x8e\xfaJ\x19?N|C,\x11\xd2Y\xdc', 0x220, '\xea\x17\xaag\xa0\xe9@\xab\x16\x05\x00\x00\x00vo\'\x86\v\xaf\x16\xdb\xba\xee$z\x85\xbft$\xf6\xa6\r\xb3]\xa1,\x87\x96\xfc8\xc4K\x17\f\xeb\x8a\b\xd2\xea\xa0\r\x00\x00\x00\x00\x00\x001\x05x\xf7\xea\xfbw\xcaw\aL\x88v\xcb}\xa0\x90\xe7f\x9c\t \"\t\xbeN\x94\x12\x00\r\x00\xb3+Dbu\x9f&Z\xff\xf6\x02l\xa4\xb2K?\b\x1b\x91\xb4\x98\xf0\xc3\xb7\x8b\xb2\xd3\x0e\xe4\fv\xdaE\x95\xa4\xd9\x8f!\x1fJW\xd5\xb6\xce-C\x7f\b\r\x82G\\,\x8bfc\xd3\x02h\xaav\xa0\x01\xfc\xce\xb3\xe1\x16S\xdb-\xbdNG\x0e\xfe\xe7R\b\xf1\xd2\x1e]\xa8\xf7\xc3\x19\xec\xdcV\f\x85\x82\xaeiG\x16\xc15f\x89\b\xea\x18q\f\xf2\xc8~%W\x01\x85\x83\xc9\xc2\xa1\xf4@\x9c\bU*\x8dh\xfb#\xc7B\xc8\xd6\xc44\x1f\x04\xa0=\xf1\xbe\xbc\x80f\x11.g<\xc73\x06Y`\xb2\xd9\"\xb3\xc0\x02\xc0\xc4\xe4\x99\x8e\xc9\xfd\x9d\x00\xb8\xf9\xaa\xf7!\xa7<\xefz\xce$\xd5\x87E\xbb+\x97\xb1\xc9\xaa\xf6\xfb\xff\x94\xe9\xe6\x9e;\xeb\x97\xbc$\xafEG\xb5\xa3\x9c\xcd\xa5\xd1\xf0\xec\x95Kg\x8c\xf2\xa3\x04\xc1\xf78n\x13\xfe\xe9I\x18\xe9\x83\xd9\x8cw?\x13zw\x03\x8a\x99\xf1F\xb9\x11J\xe5s#$\x83\xa3\xe22\x81\x9a\x84\\\x9d\xef\xccnI \xcf\x8b\xadM\xe0\xaaeL|\xd9\xc1I6\x00\x00\x00\x00x\x00@\x92\xd8\xf9\x12|o\xf9\xa2\xee\xb9F\xdd\xfa!N]\x03Xy\x19\xba\xc1m\xd7d\x9c\x9e \a\x868\xe2\x19\x86\xb5\xb8\f\xa5\"\xfc\x01d\xceB\xc5<\x89!\xe0\xee>\xfc\xda/\xf9G`\x89\x8aU5t\xccL+\x92W/\xb5p8\xa1\x81\xa0\xebi\xf2\xd4$)3\xac\xb9\x91>\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\x85\x8eK\xff\xf6\xe2\xe86y\x18t\'[\xc9\xf6\xa4\x10\x87@r3\xf0\x9c*\xb3\x04\xaf\xe1\x86\xfa\x94H\xc4p\x03\vr l\xbeW\x1d\xbe*\xef\xa1\x95\xe8{\xbf\x9e\x84\xebYs\xb2\x8dP|\x88\x05\xe3!\x86\xd1\xb3:N\xb0/\xd1\xec\xac&\xd2w+\xf3\x803', 0x9d, '\x00\x00\x00\x00\xc8\xa6\xbb\x10\xd8\x17\x1a\xafC$2\xb7)\x8f\x84\xe8\xbf\xb5\xcd\x00N\xff\x9f\xb1\x01\xa3\xe8\xb8\x83\a\fE\n\tT\xff\'\x8a\xca\xcf5\xb5a\xffY\xedr\xb8~?\xee\xdd\xfbb\x8c\xc8m\xa9\x91\xb8\x06\xbdO\x93~TL\xe3\x16*S\x1e\x87Q\x8c\x88.\xa3\xf6\xb4\x1b\xaf\xaf\xdbM\x17@\x8e\xb9\xb2J\xec\xb1\x99\x95m\r\xe8\xb5\xf2{\x8c\xbd6uUf\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xff\xb5\x8ek\xec51f\xbe3\x86\xfem\x1d0aU=\x1eE\xe9w\x1f\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xfc9\xd8\xc6\xc3\x96I\x96\x95\xd4\x87\xe5\xe1\x9dQ \x9d\xc5mN\xf6\xd6\xf1\xb3\xe3\xffc\xd5\xb4\xe6K\xcc~4W\xf5J\xe8\xcf\xb7\xae\xa3*\xda\x8a^\x8c\xe8\xee\xe6\x19\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80-\xe3:\xe0$\x00\x00\x00\x00'}}, 0x494) creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 14:13:16 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 692.182755][T31765] netdevsim netdevsim0 netdevsim3: renamed from eth3 14:13:16 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x8b, 0x75, 0x0, {0x80, "25f5b12da264a6d385c8be89c88483459b8a8fb7e631fcbe609d840a5a0df5af2862ce60a7377ed49dd656494ede7f514117f1fbd0eb98d63a4f3fc5dd131bbfd9069bc999fe6e6907a67d3e42af3cd5fe3776bfcdd5b7b138db58f94e633cf36a9e7e201a373817cd9aa299c0cb999713440ac75f6b91b861ba99e37b6bbeea"}}, 0x8b) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) recvmmsg$unix(r4, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[], 0x58) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "1085eeedf833d02b5f3d994e40716eb25a3f1b"}) 14:13:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x14}, 0x14}}, 0x840) 14:13:16 executing program 4: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 14:13:16 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0x36, 0x75, 0x0, {0x2b, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86"}}, 0x36) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_open_dev$sg(&(0x7f0000000100), 0x1ff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000001480)=ANY=[@ANYBLOB="010500000000000003000000e9"]) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:16 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r0) 14:13:16 executing program 4: pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) close(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$inet6(r0, 0x0, &(0x7f0000000080)) 14:13:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c}, 0x1c}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) 14:13:16 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x38, 0x75, 0x0, {0x2d, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe8659938"}}, 0x38) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000340), 0xffffff46) dup3(r4, r3, 0x0) rt_sigreturn() writev(r3, &(0x7f0000000340)=[{&(0x7f00000002c0)="c4", 0x1}], 0x1) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 692.349928][T31765] 8021q: adding VLAN 0 to HW filter on device bond0 14:13:16 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000640)={0x36, 0x75, 0x0, {0x2b, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400"/43}}, 0x36) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:16 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x2f, 0x75, 0x0, {0x24, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d"}}, 0x2f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000340), 0xffffff46) dup3(r4, r3, 0x0) rt_sigreturn() writev(r3, &(0x7f0000000340)=[{&(0x7f00000002c0)="c4", 0x1}], 0x1) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:16 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x5451, 0x0) [ 692.401615][T31765] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.435280][T10723] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.442474][T10723] bridge0: port 1(bridge_slave_0) entered forwarding state 14:13:16 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x3f, 0x75, 0x0, {0x34, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53"}}, 0x3f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000340), 0xffffff46) dup3(r4, r3, 0x0) rt_sigreturn() writev(r3, &(0x7f0000000340)=[{&(0x7f00000002c0)="c4", 0x1}], 0x1) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 692.477293][T10723] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.484630][T10723] bridge0: port 2(bridge_slave_1) entered forwarding state 14:13:16 executing program 1: setreuid(0xffffffffffffffff, 0xee01) delete_module(0x0, 0x0) 14:13:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 14:13:16 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 14:13:16 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0x4e, 0x75, 0x0, {0x43, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fbe86c08477a6e0c7da2e53b47eb85867e370e17f497d049fb737"}}, 0x4e) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:16 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)) 14:13:16 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup2(r1, r0) r2 = accept$unix(r0, 0x0, 0x0) cachestat(r2, &(0x7f00000001c0), &(0x7f0000000200), 0x0) 14:13:16 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000280), 0x0, 0x20442) pwrite64(r0, 0x0, 0x0, 0x0) 14:13:16 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x56, 0x75, 0x0, {0x4b, "25f5b12da264a6d385c8be89c88483459b8a8fb7e631fcbe609d840a5a0df5af2862ce60a7377ed49dd656494ede7f514117f1fbd0eb98d63a4f3fc5dd131bbfd9069bc999fe6e6907a67d"}}, 0x56) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) recvmmsg$unix(r4, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:16 executing program 4: r0 = creat(&(0x7f0000001900)='./file0\x00', 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 14:13:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) [ 692.705054][T31765] 8021q: adding VLAN 0 to HW filter on device batadv0 14:13:16 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 14:13:16 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r1, r0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000fc0)) 14:13:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3208012, &(0x7f0000000080), 0x1, 0x540, &(0x7f0000000fc0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x6d) socket$nl_audit(0x10, 0x3, 0x9) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) 14:13:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) io_uring_setup(0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r3, &(0x7f0000000140)={0x82, 0x7d, 0x0, {{0x0, 0x5a, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, '!)\x04\x00\x00\x00\x00\x00\x00\x00.}\xbd*\'.', 0x9, 'trans=fd,', 0x3, ']}@', 0xb, '/dev/ttyS3\x00'}, 0x13, 'rfd1D\xf2h\x14\x1d\xee\x8c\xf5\aY\xfb\xe7\xe8no', 0xee00}}, 0x82) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) rt_sigreturn() write$P9_RLERROR(r3, 0x0, 0x15) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 14:13:16 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = accept$inet(r2, 0x0, 0x0) getsockname(r3, 0x0, &(0x7f0000000080)) 14:13:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x104c, &(0x7f0000000400)) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) close(r1) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() r2 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000180)=ANY=[]) 14:13:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x3a, r0}, './file0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 14:13:16 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) mount_setattr(r0, 0x0, 0x0, &(0x7f00000000c0), 0x20) 14:13:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x39a8, &(0x7f0000000000)) close(r1) write$P9_RSETATTR(r0, 0x0, 0x0) 14:13:16 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000007c0), 0x0, 0x0, 0x0) [ 692.945232][T31765] veth0_vlan: entered promiscuous mode [ 692.963811][T31765] veth1_vlan: entered promiscuous mode 14:13:16 executing program 4: r0 = open(&(0x7f0000002000)='./file0\x00', 0x4441, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000440)) 14:13:16 executing program 1: pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f00000006c0)={0x6e9, 0x7d, 0x0, {{0x0, 0x3a0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xe7, '\x16\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x02\x01X!\x8f\xf6[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0[\xd2;S*\xfc\xb1\xc9Q\f\xca\xd8\xda\x19\xf5\xcf\x13\x91\xd1\b\x90>\xa3\xf6\xb4\x1b\xaf\x9e\xdbM\x17@\x8e\x06\x9d.\xe0\x95)\x04\x00\x00\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xfe\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xd6\xf1\xb3\xe3\xffc\xd5\x1a\x88K\xcc~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee\xe6\x18\xfd|\xe1\xd7\xdd\xa1=\xa8D=\x13}\x9au_\x1c\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80-\xe3:\xe0$', 0x12d, '\rI`\xeb=\xcf\xd0\xc70\x00\x88l\xad\x0f\b&y0\b\xcb\xea\xa0\r\x00\x00\x00\x00\x00\x001\x05\xd2\aL\x88\xb9\xb3\xfc\xc7\xb5\x06\xb0\x14\xee\xb8$\x9c\t \"\t\xbeNJ\x907\xeee\xa8-\xfdy\x95\xbb\xf84\xce\xbe\xde\xf3\xba8\xfd6\xf2\b\xfbz\xe8\xe5\x8d\x84\xce\x01\xc6\x94\x12\xe8\x9f\xfcb\xba&d\x12\\bu\x9f&Z\xff\xf6\x02l\xa4\xb2K?\b\x1b\x91\xb4\x98\xf0\xe3\xb7\x8b\a\x00\x00\x00\x00\x00\x00\x00\xb6\xeb>t\bc\xf5\x88\xfb\xe9mmx\xcak9\xe1!\xafW\x87\x13!\xdcLO{\f\xd5\xfe\xaf\xfc@Lh\\\xa0\xe9\xd6\xf2\x1d4\x87\\\xba\xd0O\x817\a\"\xb1\x90/\x13:,m\"E\xe3r\xcbzV\xb10\x9b\xfcq\xcc\xec_\xa1\xf7\x01fb\'\xe7\xce\xb1\x81\xcd#\xdeP\xb9%\x97_,S\xce\xfc\xb9\xfd\x8b\xca\xbc\xc4+\xa1\x9c\x876\xfb}M\xfb:\xea\x1e\xe3\'\xb8\xa8\xff{hg\xc4\x98\xee\'\x15LDY\xae\x11\x1b\x19\x82\xf9\xcf\xd0\xd2\xdeQW\x00\x00\x00\x81H\x00\x00\x19\xden%rbT+\x90\ruZ\xb0\xf0\x00o\xcay}\xdb\x92\f\xcf\xcd\x9d.H-V\xe0T}\x05G%\x8b\xe0\x9f\xa82\xc3b\xf9!\a\xc7$\xf4\vG\x92!&qZ$f\xc1l\xf7\x96\x98\xc2\xfa\xb3\x88\xb7\xd9\x7fK\x95j\xa68\xd1\x03\xc5\xf0\xd1\ah2\xc6\x8c\x87|\xb2\xaf\xc4xGy\xab\xbc\nhQ*\x00\xa7\x0e\xcb\x92<=\xfb \rH=8\xae\xfe\xbb\xa2>\xaf\xa0\x9f\x0e\x9f|\xa4\x1b\\\x19\x03K\xb1\xd2\xf8\xd3gA\x01\x92\x89\xce\xd8\xa5\b\xf20\x95\xd0\x0e\xa2y\x19T\x8f\x8dd\xf0\xc5B\v)j\xf2Dw\xd4\xd1\xde0uu&\n1\xdc%i\xba\xa8\xc5\x82b\xc7\x9d\xa3_\xf0\xf6\a!\x1e[tSH\x00\xc8k\b<\x8d\x99\xb2V\xdd\xbe\f|mY#\xb3}m\xc7\x92\xc7\xd4\x80T\xa4\xd9\xde\xd2\xf3v\\\x1e\xa7\x9a\x87*\xfd\x1da\xbd7QH\x8a\x1co\x9e\x99]\x05(\xe3\xf2\x03\xc2\xd6=a\x80ip3R\x04\x03N\xben\xc9\xb1\xca\x93\xad\xe9\xdc\x84\x7f^.\\T\x11\xb0N*\xc5\x9dy\x1a\xb3j\xc79\x18\xd8\xb2\xdb\xd1\xeb)\xc9\xef\xd7\x01\xe3\xa9\x11xoQ\xecto0\xf8D\x1b\xd5*d(D\xad\x0f\xfdL\xfa\r\x00\x06\xd2\xb6H[\x7f\x8eN\\e\xb9\".\xa1q\xdb\xdb(\x0f\x82\x00\x00\x00\xae\xb9\xca \x15\xf2\xa3y\xa1\xc9\x96\xadi\x8fl\x13\x93\xcc\xa4\x9cf\x99\xfd\x89\xb8\x1a\x8f{\xfe~\x87\xe7\xdd\x82~eS\x81\x84\xf6TEm\xd7\xcf\xfd\xde\xf0[\x83\x94\xf2\xa4*\x9a.\xc3=\xcd$\xfbseu\x80+7^\xb7\xca,\t\xc9\xaa\r\xdb\xccd{\xf4v\x15sk\xc2vF\xef\f\f\x050\x15G\xb1\xca\xbcvl0C\xcb>\xd6\xb0+\x95p\xedW\x9f\"\x11\xc9\xd7\xa9U\xaaSq~x{c^\x86\x89\x90\xd58\xe0@R\xd7\\\xc7\xd6\xab=\x13\xdc\xca47;l?T\x0fs\xf5Y\x02\xf9\xf3\x93\x80Q\x1d\xdbL\xe7M\x8d\xcaC\xf87W[\x13B6`\xe0'}}, 0x6e9) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$rfkill(r3, &(0x7f0000000680), 0xfffffe5b) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 693.017907][T31765] veth0_macvtap: entered promiscuous mode [ 693.034536][T31765] veth1_macvtap: entered promiscuous mode 14:13:16 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x81, 0x75, 0x0, {0x76, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d0400000000000000000000000000f191f7c858e6774e50579f207b7fdffa067ea662f60a74887d667bf04b760cef9c15950888f4d59577bdc303eba0a8a1f1c3103988a780e4cc244e58367a13e48666c66cfda9bd5e63"}}, 0x81) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 693.067217][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.082392][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.092464][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.102997][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:16 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 14:13:17 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5421, &(0x7f0000000000)) [ 693.112952][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.123424][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.133338][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.143887][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.153920][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:13:17 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) recvmmsg(r0, &(0x7f00000021c0)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_aout(r1, 0x0, 0x0) [ 693.164591][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.174615][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.185115][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.194978][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.205485][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:17 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$netlink(r0, &(0x7f0000000c00)=@unspec, 0xc) [ 693.215446][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.226038][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.236059][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.246778][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.256635][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.267191][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.277063][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.287664][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.297534][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.308294][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:17 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x28, 0x75, 0x0, {0x1d, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f"}}, 0x28) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:17 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x56, 0x75, 0x0, {0x4b, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c69280ecc846b7d1f7"}}, 0x56) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = dup3(r4, r3, 0x0) accept$inet(r5, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:17 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x5451, 0x0) [ 693.318293][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.328802][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.338880][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.349381][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.359443][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.369963][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.379892][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.390565][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.400459][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:13:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TIOCGETD(r1, 0x5424, 0x0) [ 693.411008][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.420901][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.431375][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.441309][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.451807][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.461824][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.472555][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.482525][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.493087][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.502953][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.513427][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.523332][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.533814][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.543699][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.554383][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:17 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x48c0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void, @void}}}, 0x14}}, 0x0) 14:13:17 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/block/loop0', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 14:13:17 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x24, 0x75, 0x0, {0x19, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000"}}, 0x24) creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x33fe0}}, 0x0) write$P9_RSTATu(r3, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000440)={0xffffff73, 0x7, 0x0, {0xc, '/&\xff\x00\x00\x00Y\xcf\x101@/\xaa\v\xba(\\\x8f\xc0\xbcB\x12\x92=s Y\xc9\x83\xd8X\xaa\'\xb1\xa5\xb7\x8a\xde\x96\v\xdc\x05\x9c\x93\xee\xae6+\xbcVub9\xf9\xf7y\xb1`\x87\x86\xe2\x16m\xd4\x1c\x9cr\xbf\xd7\xfc(n\xb9\x00b\"LF\x92K\xc0\x99\x9c\x05\x88\xbe>sn\x9a}[\xea\xed\xf6^\x89H\xa3\x9b\x16\xaf\xa0\xa5\xf1\xb6\xa1\xa2\x986\x8c\x01\xa1\x13\xc2\xd4\x18\x99\x18r\xf6\x19\x81\xf0\x87x\xc8 \xbf\x99\x87\x87l\x00V\x01%\f\f\x8a\xa4\xb9\x11s\x9a\'X\xff\xc2w\x18\\HM:\"\xc5\xcd}$\xc1\xbf\xdc\t\x00\x00\x00\x00\x00\x00\x00l\xe9\xe3\xb9\xf9\x88U\xb5g\x98\xfex\x94a\xf5\xd3\r\xbb\xd7\xce\x8c\x96\xd9\xcfY&\xa6\x82\x12`D\xdd.\x0e\xf9\t6\x87LT\x1ai*o\x84$\xcdG\x13\xadd\x8e\x8a\xcd\xe0\x02`\xff[\xe9\xbb\xcc/\x91\x06\xbc8\xba\xd3Jc\v\x98b\x88\xcd\xbdo\xe2\\\xbc\x05\xd1\xf8<\xf53\xa6=\xf4\xad\x8b\x1c\xdf\xe2\x9e\xe9\xbd\x1c3;\x9amJ\xa0\x192\xbf=u\xf4I\x9a\x8dSY\xd0\xa3\xda!q\xfcXg\b\xcc\xf6Qk\xb8\xc6\x89\"8G\'\xad>2LR\x0f\xc2\xe4n?\xad\xb4?\xbc\xf6\x1a\xa8q[\xd4e\xc85\xaf\xd1y\x9d\xee}P\xbc\xa0o\xd5\xfe\xb1\xdf\xb3\xfeW\xb51\xd4\x1a\xc2\x16\x97\x9a\xc6lN\x9c\x8d{Y\xa2\xfa\xa5,\xbe\x97'}}, 0x10) [ 693.564454][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.574997][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.584849][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.595401][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.605397][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:13:17 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATu(r1, &(0x7f0000000640)={0x286, 0x7d, 0x0, {{0x0, 0xd5, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x8f, '\xcdF\xc7\xe1t|{2\x03}zC|\x98\xfeg\xc1\xc4\xa0\xff\xa3\xde;F\xc4\xaeO\x80\x12\xce_\x12x\xe3d\xa7\xfc\xf03\xcb\x01\x01\x96\x8d\xc5\xc0yE\xd1o\xaa\xb8y\x9c\x12\x04O\xf9\xb9.\xb0w\xb0\xa8\xb7\x86\xd6\x81\xe1\xe1\x1dr,\x8d\xbds\xcag\xfdES\xe7\x91\x00\xdd\xac\x91\xbb\xd5\xe8\xf9U\x88~\xc2\xb4X(M\xdc \xb2K\xf8\x0e\"\x01\xab\x91 \xbe\xca\x81V\xe7X\xc2\xe3>\f0|\x99\xa8\xb6\xbd\xd7\xa7\xef\xb4&H%\xf1\x9b.\xb6\x8b\x00c\x8d\xa8\xa0', 0x3, '$#!', 0x7, '\x97\x7f\xff\xc7\x81\xf4\x00', 0x9, 'trans=fd,'}, 0x19c, '\x84\xd9\xff{\x99\x8b\xd9%\xa4K:\xd4}\x99\x061\xd28\x1d\xd1\x98\x1b\\\xf1\xb6\xdc\xe3\xf4$\xd6\x92\xf72\xaa\xd2?\x94L\a\xb3=\x83\xd6l\x87\xa4\x9cg\xe6p5h\xd0\x00\x0f\xe7\xe4\xc8\x19\xf0\x1a\x96\x16c\xa1\xd6\x1aFK\x9e\x82e\x17\xaf\x884\xc5\xf4[E\n\xfe\xe2VI\a\xc4\xf9\xf9\x13%i\xe53e|h`-jJ\x0f\x9f\xec\xb1\xfd\x1eo\x8c\xd5\xdc\xca\xf4\xef\xc3\xc3R\x1c\x10\x15l#s\xaa\xba\xee\x8d\xa3\x9bz\xd4/\xb9r\xd3\x10\x96R\xca\\\xa2,\xea\x05\xc5\xed\xb9\xd5<*~\xf7\x1fkq|\xadR{:\xb50xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0xc, 0x75, 0x0, {0x1, '%'}}, 0xc) r2 = creat(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r3, r4, 0x0) accept4$unix(r4, 0x0, 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:17 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x8e, 0x75, 0x0, {0x83, "25f5b147b2eb183aec9e5692d6e8fd89601f9644adc64b35e4b26a8881cea3f71692d7f47262f49051c3d231afd1a75e8ca80c4cd63d18d79ae83e6b1a3403009f634dd06749720111145d451e9b3d82bd2bf4f19f780d14142f4beb2ed1e794106b2caec53a95397d94cb721186ba9811358c69e587edd6078d2d47b189bcf5932566"}}, 0x8e) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 693.718395][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.728267][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.738847][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.748820][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.759319][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:17 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 693.769301][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.779779][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.789709][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.800319][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.810287][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:13:17 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x1a, 0x75, 0x0, {0xf, "25f5b12db254a6d385c8be89b81278"}}, 0x1a) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000580), 0xffffff46) r5 = dup3(r4, r3, 0x0) rt_sigreturn() write$P9_RFSYNC(r5, &(0x7f0000000300)={0x7}, 0x7) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:17 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0xa) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[], 0x33fe0}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 693.820789][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.830732][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.841217][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.851091][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:13:17 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) [ 693.861861][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.871862][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.882355][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.892345][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.902821][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.912863][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.923356][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.933305][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.943773][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.953763][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:13:17 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0xcf, 0x75, 0x0, {0xc4, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309ec290ef7d1c0f6d03c178e7dd934cf77312873cf98c3825b097b45c0122ca4c141103a77f236df342306dd258be938f39409eaf669b34f95ef646e9ed3a81de101b7c14468cf871c019c864f205a3bf5ed7091d7d162944bb4c948ce4007e0e7745a8efb9721129595d7f8289abc322a77d99a639d2a5c824254a91c1fc2befe190ae956e442902a3e8b9fe8d1986dd0aebb88d61fa8b41b"}}, 0xcf) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 693.964327][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.974230][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.985230][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.995138][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.005699][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:17 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) read$ptp(r3, &(0x7f0000000100)=""/84, 0x54) write$P9_RLERROR(r1, 0x0, 0x15) [ 694.015554][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.026099][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.036099][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.046687][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.056577][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:13:17 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x78, 0x75, 0x0, {0x6d, "25f5b12dbe89b81278a781e7d164000000000000961dba6228aed26b45b4c45fcc373f087019f253160ee309ec290ef7d1c0f6d03c178e7dd934cf77312873cf98c3825b097b45c0122ca4c141103a77f236df342306dd258be938f39409eaf669b34f95ef646e9ed3a81de101"}}, 0x78) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000002000)={&(0x7f0000000e40), 0xc, &(0x7f0000001fc0)={0x0}}, 0x0) [ 694.071950][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.081813][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.092382][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.102251][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 14:13:17 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x5451, 0x0) [ 694.117412][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.127463][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.138042][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.147899][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.158372][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:18 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = dup(r0) getsockname$netlink(r1, 0x0, &(0x7f0000000140)) 14:13:18 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) [ 694.168255][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 694.178851][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.205488][T31765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.260428][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.274801][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.286371][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.297131][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.307229][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.317913][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.327921][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.338499][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.349001][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.359577][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.369438][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.379898][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.389809][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.400276][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r0) syz_genetlink_get_family_id$nl802154(&(0x7f00000010c0), r0) 14:13:18 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2(&(0x7f0000000000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x74) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:18 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001b80), 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, 0x0) 14:13:18 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000540), 0x0, 0x0) dup2(r1, r0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000c40)=""/4096) 14:13:18 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000440)) 14:13:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup2(r0, r0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000040)) [ 694.410189][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.420728][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.430725][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.441334][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:18 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x125440, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r1, 0x0, 0x0, 0x0) 14:13:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) getpeername$inet6(r1, 0x0, &(0x7f0000000340)) 14:13:18 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000600)={0xf2, 0x75, 0x0, {0xe7, "25fdb12db254a6d3b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85877f5bee8c9b1b7afdef667e370e1ff499c1cacffeb2b05000000000000006bcaa6043859189a0484f83b61835272c6c0b9067c033b29f5865f1edacf830000f327e11552402a030030b4cd96eda88f3dc94f70eeb427f86d5d984facb93dad737ca4085487d6dc214815e21f6595d203201e8ddcd90593702f1bd2b73c94b51a7a250b3c76b28883692a9d6e0db1e96b0c071cafa4822f5247a80dd8180451bfa5475dbafe9eccc3381fc528c8cbcbb5726ea0"}}, 0xf2) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = syz_open_dev$sg(&(0x7f0000000100), 0x1ff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000001480)=ANY=[@ANYBLOB="01050000000000000300"]) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 694.451282][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.461769][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.471729][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.482353][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.492291][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.502769][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.512942][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.523426][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.533271][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.543750][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003100), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000003140)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) 14:13:18 executing program 4: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)={0xa6e40}, 0x18) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 694.553604][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.564137][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.574022][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.584662][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.594547][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.605845][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.615794][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.626536][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.636395][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.646886][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_tables_matches\x00') dup2(r0, r1) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) [ 694.656784][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.667276][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.677550][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.688116][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.698065][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:13:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) write$cgroup_freezer_state(r0, 0x0, 0x0) [ 694.708610][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.718520][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.729145][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.739178][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.749851][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:18 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x8100000e, 0x0) write$P9_RLERROR(r1, 0x0, 0xb5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000001480)={0x1, 0x0, 0x3, "e9"}) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) [ 694.759775][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.770339][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.780340][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.790859][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.800782][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:13:18 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0xac, 0x75, 0x0, {0xa1, "54a6d385fbc6b82e1657176e17f7e200be89fe949fdcc8ae6e389a93f1e2d9078a32107df90748ba4b0af5aaa6b3e5da7379ebbf73bcb75bac9148e52d20f786c49019725689cf515372fe843afd070000000000000002b5777fd8ebc885851028bfe2d28b17a0c7b286d51c6a64e43176894c3d217755577da5ac2a9e0d4e672cbeb3babbe5470bbfcb1dca1a261cf7b50cae0dfab4ba852f76544e9cf20fb980"}}, 0xac) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = eventfd(0x0) read$eventfd(r3, &(0x7f00000000c0), 0x8) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) [ 694.811261][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.821300][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.832053][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.842063][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.852583][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.862607][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.873154][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.883010][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.893491][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:18 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) creat(&(0x7f0000001440)='./file0\x00', 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 14:13:18 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000000)={0x13, 0x75, 0x0, {0x8, "25f5b12db2560500"}}, 0x13) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) accept$unix(r3, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) [ 694.903402][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.914538][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.924664][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.935186][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.945149][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:13:18 executing program 3: r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000000)) 14:13:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/power', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) [ 694.955632][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.965497][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.976110][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.985990][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.996609][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:18 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r1, r0, 0x0) r2 = accept$unix(r0, 0x0, 0x0) getpeername(r2, 0x0, &(0x7f0000000180)) [ 695.006474][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.017126][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.027000][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.037565][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.047441][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:13:18 executing program 3: syz_open_dev$sg(&(0x7f0000000500), 0xffffffffffffffff, 0xa040) [ 695.057916][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.067951][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.078764][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.088719][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.099217][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x50}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) 14:13:19 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000340)=""/4096) [ 695.109218][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.119769][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.129664][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.140256][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.154411][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.164991][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.174929][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.185529][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.195407][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:13:19 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched_retired(r0, &(0x7f00000001c0)={&(0x7f0000000240), 0x49, &(0x7f00000002c0)={&(0x7f0000000300), 0x1098}}, 0x0) 14:13:19 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x95, 0x75, 0x0, {0x8a, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d040000000000000000000000000070d4502d3dd15ffbd4d621068bfca19e922fb757988a7eb397c95b3bff648818ff8dc06d780fe410bcde08774e562519f9aafc66889eee22ab92360a5d14933a73756c12452bdb3e7738afaa42e15dd527c4ac380e21c0ca8dfa774931"}}, 0x95) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() pause() write$P9_RLERROR(r1, 0x0, 0x15) [ 695.205916][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.215790][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.226390][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.236636][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.247344][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddb3a89047bfffff00"}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) close(r1) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2006) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) [ 695.257336][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.267946][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.277829][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.288307][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.298235][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.308937][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.318965][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.329432][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.339310][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.349872][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:13:19 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x70, 0x75, 0x0, {0x65, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85867e370e17f497d049fb75f016bcaa6043859189a0484f83b61835272c6c0b9067c033b29f5865f1edae5de79b5"}}, 0x70) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340), 0xffffff46) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsu(&(0x7f0000000440), 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) [ 695.359723][T31765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.370235][T31765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.395463][T31765] batman_adv: batadv0: Interface activated: batadv_slave_1 14:13:19 executing program 4: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) lseek(r0, 0x3fffffffffb, 0x0) writev(r0, 0x0, 0x0) 14:13:19 executing program 2: r0 = add_key$keyring(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000980), &(0x7f00000009c0)={'fscrypt:', @desc3}, &(0x7f0000000a00)={0x0, "faf9a4834fde989626d3c0b25adb44f0959c5c1289c0f13d3777f178a79f67f5ed4be37a0a6cf199474ae1df3de1372f2ea012c79971e87da93d3b156f8c6848"}, 0x48, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0xf, r1, 0x0, 0x0) [ 695.420974][T31765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.430027][T31765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.438909][T31765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.447647][T31765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 14:13:19 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 14:13:19 executing program 4: r0 = socket$inet(0x2, 0x80003, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000080)) 14:13:19 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 14:13:19 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000d40)={0x4ce, 0x7d, 0x0, {{0x0, 0x437, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xe8, '\x00\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x02\x01X!\x04\xe1[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0[\xd2;S*\xfc\xb1\xc9Q\f\xca\xd8\xda\x19\xf58$\x19v\x00\x00\x00\x00\xf6\xb4\x1b\xaf\x9e\xdbM\x17@\x8e\xb9\xb2J\xec\xb1\x99\x95m\r\xe8\xb5\xf2{\'\x11+gUf\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xfem\x1d0aU=\x1eE\xe9w\x1f\xc8j<^\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xd6\xf1\xb3\xe3\xffc\xd5\xb4\xe6K\xcc~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee\xe6\x19\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80-\xe3:\xe0$\xc4\xdd', 0x99, '\xf1\x96\x8c\xc94\xaf=v^\x98\xd7\x13\xdb\x06\x00\x00\x00\x06\xa47\xa0hI\xf4\trbwp0\xf0M\xbak\x94\xc3\x9aq\xc3b\x9b\xf3\x81]Tm%\xb3\xd3e\x11\xf4\x95\x8b\xbb\xe8\x94\xb1p\xdf\xc0\xe3\xe3\xa3\xfd\x10\xe4\xb9\xd7\x8a\x98\xf9\xdd\x1a=H\x85\x0e\xd7\x81\xae\xb7\xba(\xea\xf8<\xa8|\t\x95/\xd2\xe0\x1f\x83\x95\xe3=\x0e\xe4\x9aQ\xde\xa7)\x83I\xf1\x18I\x05\x8f)\xed\x95\x02. \xcd\x16\xd3\xbb\x04#\xee8\xac\xe6\x94Ijx22j\xd1\xe4y7\xb4\xac!\x8e\xb8\xa1b\xe0\x05\x0fN1O', 0x238, '\x03\x01B,\t+o\x95\xde\x92\xc8(\x9d{\xc2\x98\xc0\x04\x00\x00\x95\x8eF|ikF\xafh\xa2\x00\x9d\xfd\x9c\x84v\x04\xc7r\xcb\x90)\xde\xee\xf0\xa75\xb1\xa5\xc0\xbe\xfb\xd5@b\x1d\xd85\a\xfa\xa7y\xb3K\xe7d\xf7%\xdf\xdc\xa7\x999)\x89\f\xa4\xbd\xbb\n\xbfy\x94~\xc1\xfec\xf1]&\xf7;\xf6\xe1\xb6N\xc1\xec\x00\xa4\x86K\xeb\x1f\xc5\x93\xf9\xfdw1\xd5\xac\xf2\x9c\xa4\x04]xG.\xbd\xe7`\xe8\x88:\xa3\x17\xaff\xf4\xd1\xc7\x96nG\xa8\xa8\xb0\xda\xe4R\xb8\xcb\xe9\b\xe6D\xc2\x82iu\xcb\xb7\x88\x9e<\xbd\x86\x9b\nP\xf6:#\x02\xbf\x87\t><\xd4\x18\x90\xbd\xa4\xb8\x97\v.\xee]\x13\x17\xb4( \xc0Z\x928\x8e\xce\'!\x90&\xf8#\x84\xb7\xed\x14\x8do\xec\x90>\x1d\x8f\xa2\x00\x80\x00\x00\x00\x00\x00}e\xcb\xe7\x98\xf9\x00\x00\xe1\\\xf8\xb9\xb0\xea\xf0\xe1\x8b\x96Z\xb6H\x86\xc3\x98\xed\x03q\n$?\xdd\xabg\x14\xb5\xf1\xf0\x8aU\xc8 \xa5\xff16PV\x95\xd1C\xa7UG\xcb\x89\xddj\x0e1N\xf9|\xa4\xfd\x8cF\x04\xf3\xa1ISG\xe6\xd3\xfd\xb8-\xa6xNaA\x11\x06\x1f\xa4\r\xb7\xda+\xf4YDe\xf1-\xc2\x924\xc0\xd4v8TC\xa7Y:&uf\xc7\xceu\r\xeb\xd4\xb6\xd6c\xac\xa5\xf01\x02\x1b_R\xa0\xea\x93\x1e\xad\xab\xb1\xa2\xf0\x8c\xd0\x14\xb8\x02\x02\xae\x8b\xda\x82]\xdf\x96l\xa4E\xf7\xc4\xc9\x13\x9f(\xcd\x96\x1f\xbf<9z/\xb2\xd9\xd0\x1d \x14Q\xc1\x8d\x86\xaf\xa2\xd2\xed\xc9\xe3\xdfi\xb0j\x1b\x96\xf3E\x03UX\xb8Kdw\x05f\xb0;\xbc2\x12\\\x87r\xc7\xfb\xd1\xa9:=%\xc1\a7\f@\xe3\xd8\x1f=\x16\x89\xcf\x14#7\x92\xc6\x97\xc5\x17\x05\xcfE\x99HYHhG\'\xd7\xc5G`j\xa3\x17\xda\x93\x81\xed\x0f;\xa8wU\x9cJ\xe8\xfb\x92\xb5\fy\xe8\xbc}\xbf)0\xd7\xe1i\x06\n\xb3>\x95\xd5\xfc\x87v\xcc\x1d\xd07\x86l\xd4\xc4[K\x9es\x98[\x1c\xd4\xdfs\x0f\xae\x7f\x06\x1a`>H\x8a\xf6\xea&\xb2\xa8\x16\xec\x83\x842:\\\xd2\xa4;\x1c\xac\xce\xecm\x8f\xc0G\n\xa2c\x05\x81\xc2t\x85_)\xd2\x05d', 0x4b, '_B\xd8\xaa.\xce\xf2C\x11\x84(\xfa\xdc\xd5\xe2-\xb32>\xda\xc1!W\x00JW\x9b\'\x96\x80i\xa8K\xfd\xd8\x01\xc5C0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340), 0xffffff46) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:19 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f00000002c0)={0x93, 0x75, 0x0, {0x88, "25f5b147b2eb183aec9e5692d6e8fd89601f9644adc64b35e4b26a8881cea3f71692d7f47262f49051c3d231afd1a75e8ca80c4cd63d18d79ae83e6b1a3403009f634dd06749720111145d451e9b3d82bd2bf4f19f780d14142f4beb2ed1e794106b2caec53a95397d94cb721186ba9811358c69e587edd6078d2d47b189bcf59325662eee345e11"}}, 0x93) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:19 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0x4f, 0x75, 0x0, {0x44, "25f5b12db254a6d385c8be89b81278a781e7d164c1d2000000e070e17f497d04000000000000000000000000004062f0dfc17322b1871ddb916378df6fa7de595f61c692"}}, 0x4f) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x50}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:19 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000300)={0x25, 0x75, 0x0, {0x1a, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d2"}}, 0x25) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:19 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000180)={0xa7, 0x75, 0x0, {0x9c, "54a6d385fbc6b82e1657176e17f7e200be89fe949fdcc8ae6e389a93f1e2d9078a32107df90748ba4b0af5aaa6b3e5da7379ebbf73bcb75bac9148e52d20f786c49019725689cf515372fe843afd070000000000000002b5777fd8ebc885851028bfe2d28b17a0c7b286d51c6a64e43176894c3d217755577da5ac2a9e0d4e672cbeb3babbe5470bbfcb1dca1a261cf7b50cae0dfab4ba852f76544e"}}, 0xa7) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = eventfd(0x0) read$eventfd(r3, &(0x7f00000000c0), 0x8) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:19 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x8c, 0x75, 0x0, {0x81, "25f5b12dc45605000000be89fb42c7882f892ef38ad44019ca72c1a7554b887b0e472b7c32586c4358e4da32696976c7d8b61b2503c9c782d973147e99ce650eb8ab36486a190cd81e6e6c85ceda1cacb3086d99aaedf35d5634052cae47dec8601f976aeec2ebce529e468236162a15d9feed32ae245b4ce48b0a93699494b1bb"}}, 0x8c) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x33fe0}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 14:13:19 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x33fe0}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x17) 14:13:19 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 14:13:19 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000400)={0x27, 0x75, 0x0, {0x1c, "25f5b12db254a6d385c8be89b81278a781e7af607c15d164c1d26e0a"}}, 0x27) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r5 = dup(r4) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r5) write$P9_RLERROR(r1, &(0x7f0000000080)={0xfffffffffffffd46, 0x7, 0x0, {0xc, '/&\xa7\xe8\x84\xfcY\xcf\x101@/'}}, 0x15) 14:13:19 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RREAD(r1, &(0x7f0000000600)={0xe9, 0x75, 0x0, {0xde, "25fdb12db254a6d3b81278a781e7af607c15d164c1d26e0a630e82f9b1e2176d3a315c125fe865993877a6e0c7da2e53b47eb85877f5bee8c9b1b7afdef667e370e1ff499c1cacffeb2b05000000000000006bcaa6043859189a0484f83b61835272c6c0b9067c033b29f5865f1edacf830000f327e11552402a030030b4cd96eda88f3dc94f70eeb427f86d5d984facb93dad737ca4085487d6dc214815e21f6595d203201e8ddcd90593702f1bd2b73c94b51a7a250b3c76b28883692a9d6e0db1e96b0c071cafa4822f5247a80dd8180451bfa5475dbafe9eccc3381f"}}, 0xe9) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0